last executing test programs: 6m44.15738037s ago: executing program 0 (id=8877): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000029c0), 0x400006d, 0x20000004) shutdown(r0, 0x2) 6m43.851070673s ago: executing program 0 (id=8883): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2}}, 0x10) 6m43.657141096s ago: executing program 0 (id=8887): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="259f8863a9a34400000200000000", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m43.43058641s ago: executing program 0 (id=8893): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 6m43.378145352s ago: executing program 0 (id=8895): sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000080) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) 6m43.217270509s ago: executing program 0 (id=8901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 6m28.10846996s ago: executing program 32 (id=8901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 6.695943221s ago: executing program 4 (id=15941): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r3, r1}) 6.386700914s ago: executing program 4 (id=15942): vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba49945c7638ceae1ae0ce81d2d58efd38019218141da7ee97f61370daaa59e5e4edee1adfb43605d7933647892544940be4a59f9d63d5aff73ce8b498e0e64898f4d38dfcf9a4ab12a254c24c199e882ca2207e036ddacc2ac995e14ad43c4391ecc34effaadb5d6559ea5669139d9c6f29ebe977a497c310a9c40", 0x81}], 0x1, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) 6.279948455s ago: executing program 4 (id=15943): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6.259496765s ago: executing program 4 (id=15944): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 5.25077973s ago: executing program 4 (id=15952): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x0, 0x61, 0x9}]}}]}}]}, 0x44}}, 0x2004c850) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.994881901s ago: executing program 4 (id=15956): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8918, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 2.863999006s ago: executing program 3 (id=15977): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x0, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r1, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) 2.834453261s ago: executing program 2 (id=15978): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) preadv(r1, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/189, 0xbd}, {0x0}], 0x2, 0x4f, 0x6) 2.284126975s ago: executing program 5 (id=15983): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x14, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4008800) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002680)={0xa40, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x54c}}, {0x8, 0x7, 0x40}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9c000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff68}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x1, 0xff, 0x10}, {0xfe, 0x3, 0x9, 0xfee}, {0x8, 0x8, 0x6, 0x5}, {0x8, 0xe, 0x2, 0x7}, {0x0, 0x2, 0x3, 0x40}, {0x3ff, 0xe5, 0x9, 0x80}, {0x10, 0xf, 0x0, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x159d}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ad}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x44}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x8, 0xfe, 0x4, 0x2}, {0x7, 0x80, 0x81, 0xb446}, {0x3, 0xce, 0x9}, {0x1, 0xb, 0x40, 0x8}, {0x7, 0x6, 0x5, 0xf9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0xa40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20050804) 2.130046546s ago: executing program 5 (id=15985): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.902626302s ago: executing program 2 (id=15987): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1}, 0x3}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.698576434s ago: executing program 3 (id=15989): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf254100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) 1.587076441s ago: executing program 1 (id=15990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x38}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0x8}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1.586596225s ago: executing program 3 (id=15991): unshare(0x2c020400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}}, 0x0) 1.520219824s ago: executing program 5 (id=15992): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.389834911s ago: executing program 5 (id=15993): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 823.862655ms ago: executing program 5 (id=15994): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4010) 722.26387ms ago: executing program 2 (id=15995): ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000004040)={0x0, 0x0, @start={0x0, 0x0, "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", "083f6f82331d85048e7c29e585f53e63785c78f2055f36ab4076c64a88a452762d64035d49a35f9cf126ca3724e840a2e4f3964e53519e56a25ffd217d4d9d07dc1f2b39738268ee6932482833afe48afc6b39086082c0b43b174ef8e0accdcd70ecbb16dea63210657a916b579902765a8185f8f1ce80ee19aa377351f5f273da05ba49f1a63fbfd7223828ba8b0fa95577d23f8834a30a3995510e91234d0850373ae6abfb931b9b4194c95032685c558030d8969f540b1393eb88484e8212876d87d63b52f87f5733944f11cb1f5c3eb82b0fdb8d664841fbb731d2516250a08864f72a0726e9c5bb03f215d2ab10c7f8d153f678b6ac49ee96689f5bd677fada4676c15a6bd54103255ccb1a042f4b6251c8588a515a4057805b38d149615df2244bf50a0f5c9802d3ed5f5edb1e33591d2f5545f1b7d1e4de79bfe95108fab7f205a2f16adf826b20656b786cba7ce9a7d8a37aff652d5237bc45b105046bb69282a6ee0bca537f9dcc630270a45cdfbb02c42295a49939db67ca3ea82d7868f035ab123915049329ece5ccf16357b0a2e8e01782277a9e06b9f18bd6cc5ad92af9f1baa0dcdaa31a579bb124f7179690dea7ecbe1dfeb5b95f4177925e667914e9ecd76276492019b64a04d025e1eb3bd6707059c7ffa1aac297fd9e38759d42320ac4fa28714c3cf622e49f67201535ede59a5ed0ed37f3e8aca3209d391d0055fb5d4a72ac1115488d17eac5638d7a8111e17b80867d0227ed7c0b8d64e303f57548a8159a29e3c7aa94f3ae88c9d341120c6113b6f493569f189c1e25fc484c2a6a9b0c7180a5e42f84ec2ec2ffe00106de880a9ac335b1cb40f874f9ec6cdaf6287f8ee15737bcb184147d61e3a998e1dc9a4b4119ca2571b6799e08603c05a623bf87cb647000500ae08c200fb644874a69db7502b5a63983d4ce8282ea156b4805eb5ac2c73969d515d23894e28b7bb26edcf4299bfb03697e95e3d2ad6e84d9fc23978f2110f844eeece0eb7206b86dc57c2080946aac3d78aa2b9c352d7cb03031e938c9644da7a7f4b048ddcb67aecf34bdc25bcd1970edf09e5afbe1e878b5fa118100441a15ff751d69f696f54f695d0697995e96102a7233eb64b5d30960d2b31bcd13f30cd9494690f2de83dc90ea11525bb6190de49437edc1fe4939f626ceb9e6a8294b296316f6503ec4e117e5fb08e8444006fbe6080876a25b72b3c90ec01f00cccf7044d74bb4c5654783bfe562b2708efbe57170852f9ea2f039324e14062a844cd5acf72590924a97db906ca9dd30e9a213db4313145936f12aeb479567201fa53d51b7295b8e906bae333e917f0dea6eda8089cb168979867dc15c91f6fffe740ddb759fd57190197e965d72f7ec4fa1716655d1211e18f283ca10496d79379ea0cf5acd851544fed8aacff0f2bbef237401ce"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xfd, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 672.563806ms ago: executing program 3 (id=15996): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x130, 0x1c8, 0x130, 0x98, 0x0, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010101, @multicast1, 0xffffff, 0xff, 'wg1\x00', 'vlan0\x00', {0xff}, {0xff}, 0x1, 0x2, 0x65}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, 0xffffff00, 0xffffffff, 'vcan0\x00', 'vlan1\x00', {}, {0xff}, 0x29, 0x1, 0x30}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2b}}}, {{@ip={@local, @broadcast, 0xff, 0xff, 'pim6reg0\x00', 'erspan0\x00', {}, {0xff}, 0x5c, 0x6, 0x59}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x9, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) 644.924698ms ago: executing program 1 (id=15997): setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x8, 0x200, 0x313b, 0x1}, 0x10) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x2, 0x2, 0x1) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 475.379814ms ago: executing program 1 (id=15998): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYRES8=r0], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 462.369449ms ago: executing program 3 (id=15999): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x21, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b2"}}, 0x2f) 450.255157ms ago: executing program 2 (id=16000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x78, 0xc, 0x8, 0xfffffffe, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56743, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x2, 0xfff1}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 333.779381ms ago: executing program 1 (id=16001): r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/mnt\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 321.080414ms ago: executing program 2 (id=16002): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="94", 0x1}], 0x1, 0x8000009, 0x9) sendfile(r0, r1, 0x0, 0x100000ff) close(0x3) close(0x4) 175.064557ms ago: executing program 2 (id=16003): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0xb9, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 163.468521ms ago: executing program 1 (id=16004): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket(0x23, 0x80805, 0x0) listen(r2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x8002a000}) 83.916781ms ago: executing program 5 (id=16005): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010) poll(&(0x7f0000000380)=[{r1, 0x10}], 0x1, 0x2d) 83.690939ms ago: executing program 3 (id=16006): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 0s ago: executing program 1 (id=16007): socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) kernel console output (not intermixed with test programs): [T30218] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 625.181335][T30218] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 625.190864][T30218] Node 0 DMA32 free:1244472kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23820kB inactive_anon:0kB active_file:11560kB inactive_file:161696kB unevictable:1536kB writepending:1248kB zspages:0kB present:3129332kB managed:2552552kB mlocked:0kB bounce:0kB free_pcp:94960kB local_pcp:23012kB free_cma:0kB [ 625.286052][T30218] lowmem_reserve[]: 0 0 0 0 0 [ 625.305108][T30218] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 625.359435][T30218] lowmem_reserve[]: 0 0 0 0 0 [ 625.364450][T30218] Node 1 Normal free:3888024kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:56140kB local_pcp:27572kB free_cma:0kB [ 625.398260][T30218] lowmem_reserve[]: 0 0 0 0 0 [ 625.403566][T30218] Node 0 DMA: 2*4kB (U) 1*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15328kB [ 625.438830][T30218] Node 0 DMA32: 5998*4kB (UME) 5436*8kB (UME) 2190*16kB (UME) 1229*32kB (UME) 430*64kB (UME) 984*128kB (UME) 806*256kB (UME) 512*512kB (UME) 262*1024kB (UME) 102*2048kB (U) 1*4096kB (M) = 1245080kB [ 625.470339][T30218] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 625.514623][T30218] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 16*16kB (UM) 3*32kB (UM) 8*64kB (UM) 6*128kB (UM) 5*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 946*4096kB (UM) = 3888024kB [ 625.554261][T30218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 625.580151][T30218] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 625.609888][T30218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 625.640368][T30218] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 625.668392][T30218] 44652 total pagecache pages [ 625.679625][T30218] 0 pages in swap cache [ 625.690949][T30218] Free swap = 124996kB [ 625.725783][T30218] Total swap = 124996kB [ 625.743604][T30218] 2097051 pages RAM [ 625.756306][T30218] 0 pages HighMem/MovableOnly [ 625.772911][T30218] 427130 pages reserved [ 625.779066][T30259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11575'. [ 625.779153][T30218] 0 pages cma reserved [ 625.841447][T30259] gretap1: entered allmulticast mode [ 625.945062][T10164] wlan1: Trigger new scan to find an IBSS to join [ 626.260571][T30287] netlink: 67 bytes leftover after parsing attributes in process `syz.4.11586'. [ 626.485935][T30282] bridge0: port 1(dummy0) entered blocking state [ 626.492624][T30282] bridge0: port 1(dummy0) entered forwarding state [ 626.643916][ T5741] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 626.704075][T30282] 8021q: adding VLAN 0 to HW filter on device eth0 [ 626.729690][T30282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 626.741847][T30306] xt_connbytes: Forcing CT accounting to be enabled [ 626.752765][T30282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 626.768069][T30282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 626.974215][ T5768] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 627.026213][T10164] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.067308][T10164] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.067715][T30316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11599'. [ 627.083333][ T5741] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 627.109069][T10164] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.152020][T30316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11599'. [ 627.181539][T10164] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.406447][T30331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11606'. [ 627.416512][T30331] netlink: 'syz.2.11606': attribute type 30 has an invalid length. [ 627.440274][T30331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11606'. [ 627.513414][ T5741] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 627.542272][T30336] __nla_validate_parse: 1 callbacks suppressed [ 627.542295][T30336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11608'. [ 627.583765][ T5826] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 628.105816][T10162] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 628.146955][T30367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11622'. [ 628.260026][T30375] netlink: 192 bytes leftover after parsing attributes in process `syz.2.11626'. [ 628.757528][T30403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11640'. [ 628.908968][T30409] netlink: 67 bytes leftover after parsing attributes in process `syz.5.11643'. [ 628.984015][T10170] wlan1: Trigger new scan to find an IBSS to join [ 629.006199][T30409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 629.028313][T30409] 8021q: adding VLAN 0 to HW filter on device eth0 [ 629.048948][T30409] 8021q: adding VLAN 0 to HW filter on device eth1 [ 629.067593][T30409] 8021q: adding VLAN 0 to HW filter on device eth2 [ 629.088625][T30409] 8021q: adding VLAN 0 to HW filter on device eth3 [ 629.114706][T10164] netdevsim netdevsim5 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 629.137647][T10164] netdevsim netdevsim5 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 629.168510][T10164] netdevsim netdevsim5 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 629.191820][T10164] netdevsim netdevsim5 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 629.216544][T10162] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 629.230056][T10162] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 629.783446][T27508] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 629.906637][T10172] wlan1: Creating new IBSS network, BSSID be:66:9e:cc:2e:38 [ 631.189644][T30494] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.11679'. [ 631.960163][T30531] tipc: New replicast peer: 255.255.255.255 [ 631.976372][T30531] tipc: Enabled bearer , priority 26 [ 632.983370][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 633.020624][T30548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11701'. [ 633.093253][T27508] tipc: Node number set to 769 [ 634.012718][T10164] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.026676][T10164] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.047120][T10164] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 634.074578][T10164] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.217482][T30643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11743'. [ 636.438297][T30689] netlink: 332 bytes leftover after parsing attributes in process `syz.1.11763'. [ 636.448255][T30689] netlink: 'syz.1.11763': attribute type 9 has an invalid length. [ 636.457777][T30689] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11763'. [ 636.476501][T30689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11763'. [ 636.615128][T30695] block nbd1: Unsupported socket: should be TCP or UNIX. [ 636.669900][T30693] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 636.683038][T30693] bond10 (unregistering): Released all slaves [ 636.691428][T30700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11768'. [ 637.059970][T30718] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11776'. [ 637.077595][T30719] netlink: 67 bytes leftover after parsing attributes in process `syz.2.11774'. [ 637.164750][T30714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.178950][T30714] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.204558][T30714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.312774][T30714] veth1_vlan: left promiscuous mode [ 637.332551][T30714] veth0_vlan: left promiscuous mode [ 637.358248][T30714] veth0_vlan: entered promiscuous mode [ 637.379891][T30714] veth1_vlan: entered promiscuous mode [ 637.411516][T30714] veth0_macvtap: left promiscuous mode [ 637.422911][T30714] veth0_macvtap: entered promiscuous mode [ 637.456558][T30714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 637.487490][T30714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 637.508892][T30714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 637.547678][T30714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 637.565045][T30714] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 637.666589][T30719] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 637.682891][ T5768] uyz0: Port: 1 Link ACTIVE [ 637.694076][T10164] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.701279][T10164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.776378][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.830346][T10170] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 637.857320][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.893554][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.952511][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.010992][T30736] bond0: entered promiscuous mode [ 638.028458][T30736] bond_slave_0: entered promiscuous mode [ 638.048020][T30736] batadv0: entered promiscuous mode [ 638.130882][ T5647] block nbd1: Receive control failed (result -32) [ 638.353682][T30753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11790'. [ 638.375344][T30753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11790'. [ 638.685328][T30771] xt_hashlimit: size too large, truncated to 1048576 [ 639.945522][T30732] wlan1: Trigger new scan to find an IBSS to join [ 640.423341][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 640.485207][T30827] netlink: 'syz.1.11825': attribute type 12 has an invalid length. [ 640.514556][T30827] netlink: 'syz.1.11825': attribute type 11 has an invalid length. [ 640.534256][T30827] netlink: 212004 bytes leftover after parsing attributes in process `syz.1.11825'. [ 640.536456][T30828] tun0: tun_chr_ioctl cmd 1074025672 [ 640.556932][T30828] tun0: ignored: set checksum disabled [ 641.704401][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 642.606284][T30923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11870'. [ 642.906555][T30732] wlan1: Trigger new scan to find an IBSS to join [ 643.909902][T30982] bond4 (unregistering): Released all slaves [ 644.600139][T31015] netlink: 'syz.5.11911': attribute type 1 has an invalid length. [ 644.632608][T31015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.644888][T31019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11912'. [ 645.373036][T31054] netlink: 'syz.5.11929': attribute type 8 has an invalid length. [ 645.384784][T31054] sch_fq: defrate 0 ignored. [ 645.556024][T31058] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11930'. [ 645.948959][T30732] wlan1: Trigger new scan to find an IBSS to join [ 646.886659][T10162] wlan1: Creating new IBSS network, BSSID 42:24:f0:f0:9e:7a [ 647.512322][T31164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11978'. [ 647.701028][T31170] batman_adv: batadv0: Adding interface: vlan5 [ 647.715924][T31170] batman_adv: batadv0: The MTU of interface vlan5 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.750280][T31170] batman_adv: batadv0: Not using interface vlan5 (retrying later): interface not active [ 647.966061][T31190] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 648.625316][T31223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12006'. [ 648.649629][T31223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12006'. [ 648.697854][T31226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12007'. [ 648.904960][T31238] netlink: 'syz.4.12009': attribute type 8 has an invalid length. [ 649.386650][T31257] veth1_to_batadv: entered promiscuous mode [ 649.782805][T31276] netlink: 'syz.2.12028': attribute type 58 has an invalid length. [ 653.541758][T31419] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12089'. [ 654.017078][T31439] sctp: [Deprecated]: syz.5.12100 (pid 31439) Use of int in max_burst socket option deprecated. [ 654.017078][T31439] Use struct sctp_assoc_value instead [ 654.348221][T31457] sctp: [Deprecated]: syz.4.12109 (pid 31457) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.348221][T31457] Use struct sctp_sack_info instead [ 654.522315][T31466] erspan0: entered promiscuous mode [ 654.764850][T31478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12119'. [ 654.780754][T31478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12119'. [ 655.145034][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.688899][T31527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12143'. [ 655.712786][T31528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12142'. [ 655.866157][T31530] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.12144'. [ 656.085417][T31536] sctp: [Deprecated]: syz.4.12146 (pid 31536) Use of int in maxseg socket option. [ 656.085417][T31536] Use struct sctp_assoc_value instead [ 656.162761][T31541] nbd: nbd1 already in use [ 657.042378][T31585] netlink: 758 bytes leftover after parsing attributes in process `syz.3.12170'. [ 657.063007][T31585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12170'. [ 657.425461][T31601] batadv0: entered promiscuous mode [ 657.432447][T31601] veth1_to_hsr: entered promiscuous mode [ 657.439777][T31601] debugfs: 'hsr1' already exists in 'hsr' [ 657.445981][T31601] Cannot create hsr debugfs directory [ 657.458654][T31601] hsr1: entered allmulticast mode [ 657.468217][T31601] batadv0: entered allmulticast mode [ 657.477875][T31601] veth1_to_hsr: entered allmulticast mode [ 657.486738][T31606] C: renamed from veth1_to_team (while UP) [ 657.512683][T31606] netlink: 'syz.2.12179': attribute type 8 has an invalid length. [ 657.516729][T31610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12181'. [ 657.543940][T31606] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 657.637449][T31613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12182'. [ 658.265539][T31648] macvlan3: entered allmulticast mode [ 658.274164][T31648] gretap0: entered allmulticast mode [ 658.690312][T31656] __nla_validate_parse: 2 callbacks suppressed [ 658.690335][T31656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12203'. [ 658.746596][T31656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12203'. [ 659.582714][T31697] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12218'. [ 659.771933][T31703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12221'. [ 659.800045][T31703] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12221'. [ 659.821315][T31703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12221'. [ 659.872895][T31708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12223'. [ 659.898272][T31708] netlink: 'syz.2.12223': attribute type 15 has an invalid length. [ 659.925021][T31708] netlink: 'syz.2.12223': attribute type 25 has an invalid length. [ 659.944873][T31708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12223'. [ 660.492573][T31728] netlink: 'syz.1.12232': attribute type 1 has an invalid length. [ 660.529392][T31728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12232'. [ 661.139364][T31746] netlink: 81 bytes leftover after parsing attributes in process `syz.3.12240'. [ 664.302582][T31884] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 664.650033][T31906] __nla_validate_parse: 3 callbacks suppressed [ 664.650055][T31906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12312'. [ 665.649000][T31959] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12337'. [ 665.681541][T31963] netlink: 'syz.2.12339': attribute type 12 has an invalid length. [ 665.705853][T31963] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.12339'. [ 666.318332][T31999] C: renamed from veth1_to_team (while UP) [ 666.328149][T31999] netlink: 'syz.4.12357': attribute type 4 has an invalid length. [ 666.345557][T31999] netlink: 116 bytes leftover after parsing attributes in process `syz.4.12357'. [ 666.366507][T31999] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 666.571956][T32011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12362'. [ 667.126389][T32037] netlink: 'syz.1.12373': attribute type 1 has an invalid length. [ 667.144661][T32037] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12373'. [ 667.165117][T32037] netlink: 'syz.1.12373': attribute type 1 has an invalid length. [ 667.180371][T32037] netlink: 'syz.1.12373': attribute type 8 has an invalid length. [ 667.188978][T32037] netlink: 582 bytes leftover after parsing attributes in process `syz.1.12373'. [ 667.198789][T32037] netlink: 1 bytes leftover after parsing attributes in process `syz.1.12373'. [ 667.392173][T32043] tap0: tun_chr_ioctl cmd 1074025677 [ 667.414142][T32043] tap0: linktype set to 6 [ 667.849558][T32069] netlink: 'syz.3.12389': attribute type 3 has an invalid length. [ 667.916745][ T30] audit: type=1804 audit(1780662430.994:2): pid=32073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12391" name="/newroot/2576/cgroup.controllers" dev="tmpfs" ino=12929 res=1 errno=0 [ 667.996102][ T30] audit: type=1800 audit(1780662431.034:3): pid=32073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12391" name="cgroup.controllers" dev="tmpfs" ino=12929 res=0 errno=0 [ 668.243001][T32090] netlink: 'syz.5.12398': attribute type 1 has an invalid length. [ 668.279158][T32090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.891559][T32119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12410'. [ 669.089588][T32125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12414'. [ 669.722857][T32159] __nla_validate_parse: 1 callbacks suppressed [ 669.722878][T32159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12431'. [ 670.187094][T32183] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12440'. [ 670.231004][T32183] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12440'. [ 670.606769][T32200] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.12449'. [ 670.631697][T32200] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 671.741935][T32258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 671.845417][T32262] nbd2: detected capacity change from 0 to 127 [ 671.859537][ T5649] block nbd2: Receive control failed (result -32) [ 671.869933][T25347] block nbd2: Dead connection, failed to find a fallback [ 671.880618][T25347] block nbd2: shutting down sockets [ 671.887231][T25347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.897949][T25347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 671.906318][T25347] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.916016][T25347] Buffer I/O error on dev nbd2, logical block 1, async page read [ 671.924274][T25347] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.936187][T25347] Buffer I/O error on dev nbd2, logical block 2, async page read [ 671.951215][T25347] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.960814][T25347] Buffer I/O error on dev nbd2, logical block 3, async page read [ 671.969068][T25347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 671.978614][T25347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 671.990149][T25347] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.041572][T25347] Buffer I/O error on dev nbd2, logical block 1, async page read [ 672.066634][T25347] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.087357][T25347] Buffer I/O error on dev nbd2, logical block 2, async page read [ 672.107320][T25347] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.139094][T25347] Buffer I/O error on dev nbd2, logical block 3, async page read [ 672.165109][T25347] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.183470][T25347] Buffer I/O error on dev nbd2, logical block 0, async page read [ 672.206782][T25347] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.224723][T25347] Buffer I/O error on dev nbd2, logical block 1, async page read [ 672.251704][T25347] ldm_validate_partition_table(): Disk read failed. [ 672.276899][T25347] Dev nbd2: unable to read RDB block 0 [ 672.309673][T25347] nbd2: unable to read partition table [ 672.388587][T25347] ldm_validate_partition_table(): Disk read failed. [ 672.409547][T25347] Dev nbd2: unable to read RDB block 0 [ 672.429060][T25347] nbd2: unable to read partition table [ 672.520533][ T5649] block nbd3: Receive control failed (result -32) [ 672.521007][T25014] block nbd3: Receive control failed (result -32) [ 673.102943][T32315] netlink: 220 bytes leftover after parsing attributes in process `syz.2.12502'. [ 673.183722][T32319] tap0: tun_chr_ioctl cmd 1074025692 [ 673.589747][T32337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12509'. [ 673.627942][T32340] ipvlan0: entered allmulticast mode [ 673.634851][T32340] veth0_vlan: entered allmulticast mode [ 673.641188][T32340] team0: Device ipvlan0 is up. Set it down before adding it as a team port [ 674.475755][T32380] netlink: 27 bytes leftover after parsing attributes in process `syz.1.12530'. [ 674.504799][T32378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12529'. [ 674.712532][T32393] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12536'. [ 675.322159][T32425] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12550'. [ 675.469782][T32429] tipc: Enabling of bearer rejected, already enabled [ 675.495492][T32429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12553'. [ 676.357578][T32462] bond5 (unregistering): Released all slaves [ 676.602460][T32474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12574'. [ 676.795772][T32484] netlink: 80 bytes leftover after parsing attributes in process `syz.1.12578'. [ 677.446629][T32513] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12591'. [ 677.582562][T32518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12593'. [ 677.613358][T32518] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12593'. [ 677.817679][T32535] netlink: 'syz.5.12601': attribute type 12 has an invalid length. [ 677.835589][T32535] netlink: 'syz.5.12601': attribute type 12 has an invalid length. [ 677.853591][T32535] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12601'. [ 678.508750][T32563] tipc: Enabling of bearer rejected, already enabled [ 678.722859][T32574] ref_ctr_offset mismatch. inode: 0xfa offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 679.192435][T32601] netlink: 'syz.3.12630': attribute type 3 has an invalid length. [ 679.212615][T32600] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 679.213934][T32601] netlink: 'syz.3.12630': attribute type 1 has an invalid length. [ 679.239364][T32601] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12630'. [ 679.471609][T10162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 679.862104][T32632] tap0: tun_chr_ioctl cmd 1074025677 [ 679.888254][T32637] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.889010][T32632] tap0: linktype set to 2 [ 680.609684][T32654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12657'. [ 680.760741][T10162] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.791587][T10162] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.817683][T10162] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.836648][T10162] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.584253][T32693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12674'. [ 681.608352][T32693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12674'. [ 683.229067][T32761] nbd: socks must be embedded in a SOCK_ITEM attr [ 683.245273][T32761] block nbd4: shutting down sockets [ 683.304730][T10170] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 683.692451][ T316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12712'. [ 683.720403][ T316] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12712'. [ 684.583292][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 685.281733][T25014] block nbd4: Receive control failed (result -32) [ 685.500424][ T372] netlink: 68 bytes leftover after parsing attributes in process `syz.3.12740'. [ 685.866615][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 685.879821][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.578090][ T448] macsec2: entered promiscuous mode [ 687.593776][ T448] vlan0: entered promiscuous mode [ 687.615176][ T448] vlan0: left promiscuous mode [ 688.002996][ T467] block nbd5: Unsupported socket: should be TCP or UNIX. [ 688.172375][ T473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12784'. [ 688.384832][ T485] batadv_slave_1: entered promiscuous mode [ 688.398315][ T484] batadv_slave_1: left promiscuous mode [ 689.150487][ T521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12807'. [ 689.185719][ T521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12807'. [ 689.219148][ T521] netlink: 'syz.5.12807': attribute type 20 has an invalid length. [ 689.328734][ T529] sctp: [Deprecated]: syz.4.12811 (pid 529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.328734][ T529] Use struct sctp_sack_info instead [ 689.418854][ T535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12814'. [ 692.135592][ T647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12866'. [ 692.154682][ T647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12866'. [ 692.173183][ T647] netlink: 'syz.1.12866': attribute type 18 has an invalid length. [ 692.834912][ T649] netlink: 'syz.4.12867': attribute type 6 has an invalid length. [ 692.876892][ T653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12869'. [ 693.391901][ T678] 8021q: adding VLAN 0 to HW filter on device bond2 [ 693.417105][ T678] bridge0: port 3(bond2) entered blocking state [ 693.432395][ T678] bridge0: port 3(bond2) entered disabled state [ 693.454617][ T678] bond2: entered allmulticast mode [ 693.466775][ T678] bond2: entered promiscuous mode [ 693.475336][ T678] bridge0: port 3(bond2) entered blocking state [ 693.483508][ T678] bridge0: port 3(bond2) entered forwarding state [ 693.497474][T10170] bridge0: port 3(bond2) entered disabled state [ 693.511815][ T685] tipc: Enabling of bearer rejected, failed to enable media [ 693.833502][ T703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12892'. [ 693.845454][ T701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12893'. [ 694.959620][ T731] netlink: 480 bytes leftover after parsing attributes in process `syz.2.12905'. [ 694.969984][ T731] netlink: 480 bytes leftover after parsing attributes in process `syz.2.12905'. [ 696.032358][ T753] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.040233][ T753] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.530477][ T753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.598960][ T753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.066210][ T753] gretap0: left allmulticast mode [ 697.278374][T10170] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.325838][T10170] netdevsim netdevsim5 eth0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 697.357605][T10170] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.380007][T10170] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.415224][T10170] netdevsim netdevsim5 eth1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 697.431279][T10170] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.440479][ T789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12922'. [ 697.562425][T10170] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.571388][T10170] netdevsim netdevsim5 eth2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 697.580061][T10170] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.596243][T10170] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.604862][T10170] netdevsim netdevsim5 eth3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 697.626106][T10170] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.645259][ T789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12922'. [ 697.812738][ T807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12931'. [ 697.842844][ T807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12931'. [ 698.531938][ T835] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12944'. [ 699.299980][ T876] netlink: 'syz.3.12963': attribute type 1 has an invalid length. [ 699.316957][ T876] netlink: 'syz.3.12963': attribute type 2 has an invalid length. [ 699.339551][ T876] netlink: 'syz.3.12963': attribute type 1 has an invalid length. [ 699.369929][ T876] netlink: 'syz.3.12963': attribute type 2 has an invalid length. [ 699.515725][ T887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12968'. [ 699.560545][ T889] pim6reg: entered allmulticast mode [ 699.593687][ T889] pim6reg: left allmulticast mode [ 699.718317][ T898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12975'. [ 699.744333][ T899] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 699.870794][ T905] sctp: [Deprecated]: syz.2.12978 (pid 905) Use of int in maxseg socket option. [ 699.870794][ T905] Use struct sctp_assoc_value instead [ 699.956569][ T911] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 700.852083][ T950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12990'. [ 701.049148][ T957] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12993'. [ 701.247867][ T968] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12997'. [ 701.839435][ T994] netlink: 'syz.1.13009': attribute type 5 has an invalid length. [ 702.382694][ T1017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13020'. [ 702.482999][ T1026] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13024'. [ 703.457249][ T1066] netlink: 'syz.2.13039': attribute type 9 has an invalid length. [ 703.790994][ T1090] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13048'. [ 703.979047][ T1098] tap0: tun_chr_ioctl cmd 1074025676 [ 703.985169][ T1098] tap0: owner set to 0 [ 704.220110][ T1110] netlink: 'syz.3.13057': attribute type 16 has an invalid length. [ 704.228293][ T1110] netlink: 'syz.3.13057': attribute type 17 has an invalid length. [ 704.368766][ T1116] sctp: [Deprecated]: syz.4.13060 (pid 1116) Use of struct sctp_assoc_value in delayed_ack socket option. [ 704.368766][ T1116] Use struct sctp_sack_info instead [ 704.419761][ T1110] team0: left promiscuous mode [ 704.425637][ T1110] team0: left allmulticast mode [ 704.431565][ T1110] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.459630][ T1110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.549621][ T1110] xfrm0: left allmulticast mode [ 704.570556][ T1110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 704.593730][ T1110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.662396][ T1110] veth1_macvtap: left promiscuous mode [ 704.693729][ T1110] veth0_macvtap: left promiscuous mode [ 704.710372][ T1110] veth0_macvtap: entered promiscuous mode [ 704.724050][ T1110] veth1_macvtap: entered promiscuous mode [ 704.756252][ T1110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 704.764838][ T1110] ip6tnl1: left allmulticast mode [ 704.802651][ T1110] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 704.818636][ T1110] bond0: left promiscuous mode [ 704.825896][ T1110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.834363][ T1110] ip6gretap1: left promiscuous mode [ 704.839857][ T1110] ip6gretap1: left allmulticast mode [ 704.859168][ T1110] 8021q: adding VLAN 0 to HW filter on device bond2 [ 704.867908][ T1110] veth3: left allmulticast mode [ 704.874126][ T1110] xfrm1: left allmulticast mode [ 704.881708][ T1110] ip6erspan0: left allmulticast mode [ 704.890389][ T1110] 8021q: adding VLAN 0 to HW filter on device bond3 [ 704.931074][ T1110] bridge4: left promiscuous mode [ 704.936775][ T1110] bridge4: left allmulticast mode [ 704.947594][ T1110] 8021q: adding VLAN 0 to HW filter on device eth0 [ 704.957102][ T1110] 8021q: adding VLAN 0 to HW filter on device eth1 [ 704.970213][ T1110] 8021q: adding VLAN 0 to HW filter on device eth2 [ 704.979710][ T1110] 8021q: adding VLAN 0 to HW filter on device eth3 [ 704.989209][ T1110] ipip1: left promiscuous mode [ 704.997053][ T1110] vlan1: left allmulticast mode [ 705.006550][ T1110] 8021q: adding VLAN 0 to HW filter on device bond4 [ 705.016845][ T1110] erspan0: entered promiscuous mode [ 705.024171][ T1110] ip6gretap0: entered promiscuous mode [ 705.033916][ T5741] bridge0: entered promiscuous mode [ 705.046833][T30732] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.054070][T30732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.116555][T27508] xfrm0 speed is unknown, defaulting to 1000 [ 705.120353][T10168] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.135177][T27508] syz1: Port: 1 Link ACTIVE [ 705.149733][T10168] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.168417][T10168] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.190882][T10168] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.230893][ T1140] syzkaller1: tun_chr_ioctl cmd 35108 [ 705.252202][T10168] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.279335][T10168] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.298367][T10168] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.310648][ T1146] netlink: 232 bytes leftover after parsing attributes in process `syz.3.13071'. [ 705.320855][T10168] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.374703][ T1146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13071'. [ 705.410425][T30732] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 705.450062][ T774] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 705.461669][T30732] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 705.489860][ T1152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13074'. [ 705.490917][ T1151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13073'. [ 705.541703][T30732] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 705.554023][ T774] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 705.574198][T30732] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 705.588842][ T774] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 705.784210][ T774] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 705.894989][ T774] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 706.024463][ T774] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 706.145054][ T1179] batman_adv: batadv0: Adding interface: macvtap1 [ 706.151549][ T1179] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.222105][ T1179] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 706.495636][ T1187] tap0: tun_chr_ioctl cmd 2147767520 [ 707.023328][ T1206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13096'. [ 707.036928][ T1170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13081'. [ 707.181377][ T1166] xfrm0 speed is unknown, defaulting to 1000 [ 707.657826][ T1225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13105'. [ 708.472105][ T1236] syzkaller1: entered promiscuous mode [ 708.490367][ T1236] syzkaller1: entered allmulticast mode [ 708.563232][ T1242] netlink: 14 bytes leftover after parsing attributes in process `syz.5.13112'. [ 708.739455][ T1252] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13114'. [ 708.916913][ T1246] gretap0: left allmulticast mode [ 709.050368][ C0] vcan0: j1939_tp_txtimer: 0xffff88804271f000: tx retry count reached [ 709.265679][ T1271] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13124'. [ 709.837841][ T1287] bridge0: port 1(dummy0) entered disabled state [ 710.148083][ T1287] tipc: Resetting bearer [ 710.459231][T10162] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.480766][T10162] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 710.499908][T10162] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 710.524118][T10162] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.546756][T10162] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 710.562972][T10162] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 710.575332][T10162] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.587747][T10162] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 710.597493][T10162] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 710.608449][T10162] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.624046][T10162] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 710.639350][T10162] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 710.983419][ C0] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 710.983442][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 711.341074][ T1359] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 711.351737][ T1359] batman_adv: batadv0: Adding interface: wlan0 [ 711.373313][ T1359] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 711.409196][ T1359] batman_adv: batadv0: Interface activated: wlan0 [ 711.441038][ T1361] __nla_validate_parse: 4 callbacks suppressed [ 711.441059][ T1361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13159'. [ 711.467553][T10162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 711.727943][T25014] block nbd5: Receive control failed (result -32) [ 711.850493][ T1376] tipc: Resetting bearer [ 711.971605][ T1376] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.114334][ T1376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.128216][ T1376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.171781][ T1376] ipvlan0: left allmulticast mode [ 712.178595][ T1376] veth0_vlan: left allmulticast mode [ 712.392226][ T769] uyz0: Port: 1 Link DOWN [ 712.392294][ T1394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13170'. [ 712.426522][T10162] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.448957][T10162] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.478433][T10162] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 712.507966][T10162] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.532203][T10162] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.541657][T10162] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 712.585586][T10162] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.600144][T10162] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.627724][T10162] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 712.646249][T10162] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.657849][T10162] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.669945][T10162] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 712.716034][ T1408] pim6reg1: entered allmulticast mode [ 713.020116][ T1428] syzkaller1: entered promiscuous mode [ 713.026200][ T1428] syzkaller1: entered allmulticast mode [ 713.370154][ T774] IPVS: starting estimator thread 0... [ 713.387362][ T1450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13194'. [ 713.474046][ T1449] IPVS: using max 25 ests per chain, 60000 per kthread [ 713.512654][ T1454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.990362][ T1482] veth0: entered promiscuous mode [ 714.027432][ T1481] veth0: left promiscuous mode [ 714.290973][ T1500] netlink: 'syz.2.13217': attribute type 4 has an invalid length. [ 714.897786][ T1525] netlink: 'syz.1.13229': attribute type 11 has an invalid length. [ 715.256435][ T1544] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13237'. [ 715.509006][ T1553] syzkaller1: entered promiscuous mode [ 715.522868][ T1553] syzkaller1: entered allmulticast mode [ 715.666957][ T1562] netlink: 738 bytes leftover after parsing attributes in process `syz.1.13246'. [ 715.705378][ T1529] xfrm0 speed is unknown, defaulting to 1000 [ 715.727708][ T1561] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 715.817045][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13249'. [ 715.849706][ T1569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13249'. [ 715.964193][ T1575] netlink: 'syz.4.13252': attribute type 11 has an invalid length. [ 715.983796][ T1575] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13252'. [ 716.028733][ T1575] netlink: 'syz.4.13252': attribute type 11 has an invalid length. [ 716.052862][ T1575] netlink: 59 bytes leftover after parsing attributes in process `syz.4.13252'. [ 717.223209][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 717.863989][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 718.554006][ T1663] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13289'. [ 718.594519][ T1663] netlink: 5 bytes leftover after parsing attributes in process `syz.2.13289'. [ 718.625577][ T1663] 0ªî{X¹¦: renamed from gretap0 [ 718.685956][ T1663] 0ªî{X¹¦: entered allmulticast mode [ 718.715777][ T1663] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 719.145913][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 719.958816][ T1730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13320'. [ 720.374510][ T1748] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13328'. [ 721.001951][ T1774] netlink: 'syz.5.13339': attribute type 1 has an invalid length. [ 721.251816][ T1789] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13346'. [ 721.261306][ T1789] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13346'. [ 721.525135][ T1801] sock: sock_set_timeout: `syz.4.13351' (pid 1801) tries to set negative timeout [ 721.554296][ T1804] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13350'. [ 721.617415][ T1804] netlink: 'syz.5.13350': attribute type 7 has an invalid length. [ 721.665247][ T1804] netlink: 'syz.5.13350': attribute type 8 has an invalid length. [ 721.689991][ T1804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13350'. [ 721.729286][ T1816] hsr0: entered promiscuous mode [ 721.757354][ T1813] hsr0: left promiscuous mode [ 721.921059][ T1825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13357'. [ 722.752914][ T1807] xfrm0 speed is unknown, defaulting to 1000 [ 723.247527][ T1886] netlink: 'syz.1.13370': attribute type 2 has an invalid length. [ 723.818044][ T1903] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13378'. [ 723.905413][ T1903] nbd6: detected capacity change from 0 to 1 [ 723.922709][ T1809] buffer_io_error: 138 callbacks suppressed [ 723.922731][ T1809] Buffer I/O error on dev nbd6, logical block 0, async page read [ 723.928108][T25014] block nbd6: Receive control failed (result -32) [ 723.950989][ T1809] Buffer I/O error on dev nbd6, logical block 0, async page read [ 723.998755][ T1809] Buffer I/O error on dev nbd6, logical block 0, async page read [ 724.049703][ T1809] Buffer I/O error on dev nbd6, logical block 0, async page read [ 724.095642][ T1809] Buffer I/O error on dev nbd6, logical block 0, async page read [ 724.117069][ T1809] ldm_validate_partition_table(): Disk read failed. [ 724.138564][ T1809] Buffer I/O error on dev nbd6, logical block 0, async page read [ 724.158559][ T1809] Buffer I/O error on dev nbd6, logical block 0, async page read [ 724.179354][ T1809] Buffer I/O error on dev nbd6, logical block 0, async page read [ 724.201112][ T1809] Buffer I/O error on dev nbd6, logical block 0, async page read [ 724.216963][ T1809] Dev nbd6: unable to read RDB block 0 [ 724.252581][ T1809] Buffer I/O error on dev nbd6, logical block 0, async page read [ 724.273981][ T1809] nbd6: unable to read partition table [ 724.280806][ T1809] nbd6: partition table beyond EOD, truncated [ 724.757253][ T1939] netlink: 'syz.2.13393': attribute type 2 has an invalid length. [ 724.817913][ T1941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13394'. [ 724.984218][ T1947] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13396'. [ 725.008253][ T1947] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13396'. [ 725.624230][ T1972] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 726.037444][ T1994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13414'. [ 726.055149][ T1994] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13414'. [ 726.073248][ T1994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13414'. [ 726.418655][ T2009] trusted_key: syz.3.13420 sent an empty control message without MSG_MORE. [ 726.500023][ T1983] xfrm0 speed is unknown, defaulting to 1000 [ 726.627830][ T2016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13423'. [ 727.877439][ T2062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13441'. [ 727.880762][T30732] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 727.896355][ T2062] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13441'. [ 727.919245][T30732] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 727.936193][T30732] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 727.957861][T30732] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 729.090117][ T2120] __nla_validate_parse: 6 callbacks suppressed [ 729.090136][ T2120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13470'. [ 729.887612][ T2153] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 731.011380][ T2200] netlink: 'syz.3.13507': attribute type 39 has an invalid length. [ 731.976876][ T2244] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13525'. [ 732.310831][ T2252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13529'. [ 732.514123][ T2266] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13534'. [ 732.583504][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 732.622075][ T2269] veth1_to_bond: entered allmulticast mode [ 732.641330][ T2269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13535'. [ 732.674949][ T2269] veth1_to_bond (unregistering): left allmulticast mode [ 733.857205][ T2318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13556'. [ 733.995423][ T2322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13558'. [ 734.047690][ T2322] bond4: Invalid ad_actor_system MAC address. [ 734.051711][ T2326] netlink: 'syz.4.13560': attribute type 10 has an invalid length. [ 734.054535][ T2322] bond4: option ad_actor_system: invalid value (7) [ 734.070889][ T2322] bond4 (unregistering): Released all slaves [ 734.117792][ T2326] dummy0: left allmulticast mode [ 734.131587][ T2326] dummy0: left promiscuous mode [ 734.149768][ T2326] bridge0: port 1(dummy0) entered disabled state [ 734.505529][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 734.900936][ T2357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13573'. [ 734.911568][ T2357] netlink: 'syz.2.13573': attribute type 30 has an invalid length. [ 734.936797][ T1847] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.945921][ T2357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13573'. [ 734.956806][ T1847] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.966168][ T2357] netlink: 'syz.2.13573': attribute type 30 has an invalid length. [ 734.977589][ T1847] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.994669][ T1847] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.005390][ T2360] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.13574'. [ 735.143247][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 735.923711][ T2392] netlink: 'syz.2.13588': attribute type 1 has an invalid length. [ 736.799395][ T2418] batman_adv: batadv0: Interface activated: vlan5 [ 736.914693][ T2418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.976168][ T2418] wireguard: wg0: Could not create IPv4 socket [ 737.001395][ T2418] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 737.178338][ T2398] xfrm0 speed is unknown, defaulting to 1000 [ 738.442445][ T2503] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13630'. [ 738.717595][ T2518] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13635'. [ 738.942454][ T2534] netlink: 'syz.2.13641': attribute type 11 has an invalid length. [ 739.335381][ T2560] netlink: 7 bytes leftover after parsing attributes in process `syz.5.13652'. [ 739.344788][ T2560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13652'. [ 739.355291][ T2560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13652'. [ 739.438970][ T2567] netlink: 112 bytes leftover after parsing attributes in process `syz.2.13654'. [ 739.610820][ T2576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13658'. [ 739.920536][ T2588] syzkaller1: entered promiscuous mode [ 739.926846][ T2588] syzkaller1: entered allmulticast mode [ 739.988840][ T2562] xfrm0 speed is unknown, defaulting to 1000 [ 740.001589][ T2570] dvmrp0: entered allmulticast mode [ 740.556056][ T2601] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.570047][ T2601] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.717160][ T2618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13672'. [ 740.727431][ T2618] netlink: 'syz.2.13672': attribute type 29 has an invalid length. [ 740.739332][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13672'. [ 740.757878][ T2601] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.798283][ T2601] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.012919][ T2601] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.025118][ T2601] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.154587][ T2601] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.166565][ T2601] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.324964][ T1850] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.337574][ T1850] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.441986][ T1850] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.457604][ T1850] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.503591][ T1850] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.522148][ T1850] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.551278][ T1850] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 741.560037][ T1850] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.852805][ T30] audit: type=1804 audit(1780662504.934:4): pid=2671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.13690" name="/newroot/2733/memory.events" dev="tmpfs" ino=13720 res=1 errno=0 [ 742.657313][ T2716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13706'. [ 742.673333][ T2713] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 48 [ 742.714357][ T2722] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.13708'. [ 742.727070][ T2721] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13707'. [ 744.086888][ T2793] netlink: 'syz.1.13734': attribute type 1 has an invalid length. [ 744.103525][ T2793] netlink: 'syz.1.13734': attribute type 1 has an invalid length. [ 744.351140][ T2807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13741'. [ 745.075323][ T2853] TCP: TCP_TX_DELAY enabled [ 745.491133][ T2883] xt_hashlimit: size too large, truncated to 1048576 [ 746.031491][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.047077][ T2911] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 746.095286][T27508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.122979][ T2914] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 746.452050][ T2935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.471850][ T2937] netlink: 'syz.5.13788': attribute type 29 has an invalid length. [ 746.788582][ T2955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.118451][ T2970] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.13802'. [ 747.143751][T27508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.250112][ T2976] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13805'. [ 747.307095][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.148104][ T3005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.179771][ T2983] xfrm0 speed is unknown, defaulting to 1000 [ 748.288846][ T2986] dvmrp0: entered allmulticast mode [ 750.046378][ T3088] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13853'. [ 750.423714][ T3078] xfrm0 speed is unknown, defaulting to 1000 [ 751.960771][ T3144] syzkaller1: entered promiscuous mode [ 751.981475][ T3144] syzkaller1: entered allmulticast mode [ 752.790888][ T3172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13886'. [ 753.059143][ T3182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13891'. [ 753.792188][ T3188] tipc: Enabling of bearer rejected, already enabled [ 754.084933][ T3211] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13902'. [ 754.515444][ T3244] veth0: entered promiscuous mode [ 754.521818][ T3243] veth0: left promiscuous mode [ 755.112486][ T3275] xt_hashlimit: size too large, truncated to 1048576 [ 755.697296][ T3302] netlink: 750 bytes leftover after parsing attributes in process `syz.4.13938'. [ 755.759229][ T3304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13937'. [ 755.982460][ T3315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13943'. [ 756.232174][ T3318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13943'. [ 756.303969][ T3318] nbd: device at index 64 is going down [ 756.591687][ T3310] udevd[3310]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 757.360280][ T3306] xfrm0 speed is unknown, defaulting to 1000 [ 757.776158][ T3386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.810289][ T3386] wireguard: wg1: Could not create IPv4 socket [ 757.825785][ T3386] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 757.953552][ T3398] netlink: 'syz.3.13966': attribute type 2 has an invalid length. [ 757.961882][ T3398] netlink: 112 bytes leftover after parsing attributes in process `syz.3.13966'. [ 757.972295][ T3398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13966'. [ 758.027754][ T5734] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 758.076761][ T1850] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 758.823561][ T5734] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 758.833983][ T3436] netlink: 204 bytes leftover after parsing attributes in process `syz.3.13980'. [ 759.147711][T30732] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 759.156941][T30732] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 759.426372][ T3465] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13993'. [ 759.483961][ T5734] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 759.680749][ T3480] tipc: Resetting bearer [ 760.067797][ T3494] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.14007'. [ 760.256019][ T3498] tun0: tun_chr_ioctl cmd 1074025675 [ 760.266530][ T3498] tun0: persist enabled [ 760.278674][ T3498] tun0: tun_chr_ioctl cmd 1074025675 [ 760.289758][ T3498] tun0: persist disabled [ 760.528424][ T3513] syzkaller1: entered promiscuous mode [ 760.541999][ T3513] syzkaller1: entered allmulticast mode [ 760.702707][ T3524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14021'. [ 761.096865][ T3546] sctp: [Deprecated]: syz.5.14031 (pid 3546) Use of struct sctp_assoc_value in delayed_ack socket option. [ 761.096865][ T3546] Use struct sctp_sack_info instead [ 761.173425][ T3548] sctp: [Deprecated]: syz.5.14031 (pid 3548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 761.173425][ T3548] Use struct sctp_sack_info instead [ 761.383294][ T3559] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.14035'. [ 761.662632][ T3571] netlink: 'syz.2.14041': attribute type 9 has an invalid length. [ 761.672134][ T3571] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.14041'. [ 762.379328][ T3599] netlink: 'syz.3.14054': attribute type 4 has an invalid length. [ 762.394586][ T3599] netlink: 'syz.3.14054': attribute type 8 has an invalid length. [ 762.413550][ T3599] netlink: 'syz.3.14054': attribute type 1 has an invalid length. [ 762.425928][ T3602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14055'. [ 762.433193][ T3599] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14054'. [ 762.469531][ T3599] NCSI netlink: No device for ifindex 0 [ 762.482166][ T3602] bond10: option ad_actor_sys_prio: invalid value (0) [ 762.489327][ T3602] bond10: option ad_actor_sys_prio: allowed values 1 - 65535 [ 762.505021][ T3602] bond10 (unregistering): Released all slaves [ 763.049912][ T3624] syzkaller1: entered promiscuous mode [ 763.067283][ T3624] syzkaller1: entered allmulticast mode [ 763.304590][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 763.360820][T27508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.373657][ T30] audit: type=1804 audit(1780662526.464:5): pid=3635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.14068" name="/newroot/2812/memory.events" dev="tmpfs" ino=14125 res=1 errno=0 [ 763.453112][ T30] audit: type=1800 audit(1780662526.464:6): pid=3635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14068" name="memory.events" dev="tmpfs" ino=14125 res=0 errno=0 [ 763.520166][ T30] audit: type=1804 audit(1780662526.484:7): pid=3635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.14068" name="/newroot/2812/memory.events" dev="tmpfs" ino=14125 res=1 errno=0 [ 763.587681][ T3644] netlink: 'syz.2.14073': attribute type 6 has an invalid length. [ 763.774051][T27508] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.787119][ T3654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14077'. [ 763.822066][ T3659] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14080'. [ 764.410788][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14094'. [ 764.583227][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 764.647502][ T3706] netlink: 'syz.3.14099': attribute type 21 has an invalid length. [ 764.695687][ T3706] netlink: 164 bytes leftover after parsing attributes in process `syz.3.14099'. [ 764.916592][ T3724] syz_tun: entered allmulticast mode [ 764.930807][ T3724] pim6reg: entered allmulticast mode [ 765.385942][ T3745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.615436][ T3755] IPVS: Scheduler module ip_vs_sip not found [ 765.794665][ T3767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 765.949098][ T3775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14132'. [ 766.032346][ T3779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14135'. [ 766.042436][ T3779] block nbd7: Unsupported socket: should be TCP or UNIX. [ 766.117489][ T3783] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14137'. [ 766.952702][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14158'. [ 766.986879][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14158'. [ 767.620886][ T3847] netlink: 'syz.3.14167': attribute type 1 has an invalid length. [ 767.631080][ T3849] IPv6: NLM_F_CREATE should be specified when creating new route [ 767.666008][ T3849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 767.673355][ T3849] IPv6: NLM_F_CREATE should be set when creating new route [ 767.673418][ T3847] bond5: entered promiscuous mode [ 767.686675][ T3847] 8021q: adding VLAN 0 to HW filter on device bond5 [ 767.723369][ T3849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 767.730701][ T3849] IPv6: NLM_F_CREATE should be set when creating new route [ 767.783230][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 767.859231][ T3847] 8021q: adding VLAN 0 to HW filter on device bond6 [ 767.874801][ T3847] bond5: (slave bond6): making interface the new active one [ 767.885623][ T3847] bond6: entered promiscuous mode [ 767.892238][ T3847] bond5: (slave bond6): Enslaving as an active interface with an up link [ 768.403681][ T3889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14184'. [ 768.423770][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 768.949125][ T3920] __nla_validate_parse: 2 callbacks suppressed [ 768.949148][ T3920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14202'. [ 768.989886][ T3920] netlink: 'syz.2.14202': attribute type 2 has an invalid length. [ 770.087598][ T3977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.259639][ T3986] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14229'. [ 770.378047][ T3992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14232'. [ 770.565679][ T4002] syzkaller1: entered promiscuous mode [ 770.578902][ T4005] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14240'. [ 770.594800][ T4002] syzkaller1: entered allmulticast mode [ 770.842196][ T4019] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 770.863976][ T774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 771.447061][ T4053] syzkaller1: entered promiscuous mode [ 771.465684][ T774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 771.474066][ T4053] syzkaller1: entered allmulticast mode [ 771.682970][ T4068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14264'. [ 772.263202][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 772.271321][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 772.524408][ T774] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 772.593639][ T4112] netlink: 'syz.2.14278': attribute type 1 has an invalid length. [ 772.666522][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 772.698064][ T4118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.723910][ T24] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 772.730243][ T4118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.764427][ T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 772.772331][ T4118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.783928][ T4118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.786876][T27508] xfrm0 speed is unknown, defaulting to 1000 [ 772.799539][ T4112] ip6gre2: entered promiscuous mode [ 772.806923][ T4118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.827041][ T4112] ip6gre2: entered allmulticast mode [ 772.837577][ T4118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.864130][ T4118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.883928][ T4118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.899918][ T4118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.706738][T27508] ip6_tnl_xmit_ctl: 9 callbacks suppressed [ 773.706758][T27508] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 773.943407][ T774] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 774.086786][ T4172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14301'. [ 774.153433][ T4124] netlink: 45 bytes leftover after parsing attributes in process `syz.4.14282'. [ 774.157037][ T4121] xfrm0 speed is unknown, defaulting to 1000 [ 774.941455][ T4209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14314'. [ 775.561888][ T4231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14325'. [ 776.145430][ T24] net_ratelimit: 1015 callbacks suppressed [ 776.145517][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.303307][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.318371][ T4222] xfrm0 speed is unknown, defaulting to 1000 [ 776.503311][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 776.642855][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14321'. [ 776.745704][ T4283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.907896][ T4292] netlink: 'syz.1.14343': attribute type 1 has an invalid length. [ 776.943336][ T4292] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14343'. [ 777.546164][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 777.555347][ T4314] tipc: Enabled bearer , priority 26 [ 777.684815][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 777.953486][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 778.089451][ T4331] syzkaller1: entered promiscuous mode [ 778.101138][ T4331] syzkaller1: entered allmulticast mode [ 778.484476][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 778.668730][ T4355] netlink: 'syz.4.14369': attribute type 30 has an invalid length. [ 778.680544][ T4354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14368'. [ 778.713615][ T4354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14368'. [ 778.821891][ T4365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.079362][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14379'. [ 779.546150][ T5741] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 779.618115][ T4405] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14391'. [ 779.780616][T10164] tipc: Subscription rejected, illegal request [ 779.999742][ T4427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.158042][ T4432] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14403'. [ 780.260943][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14405'. [ 780.717123][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14415'. [ 781.122865][ T4477] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.14423'. [ 781.467998][ T4490] syzkaller1: entered promiscuous mode [ 781.473932][ T4490] syzkaller1: entered allmulticast mode [ 781.624877][ T5741] net_ratelimit: 1 callbacks suppressed [ 781.624898][ T5741] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 782.386304][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.412430][ T4521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.456142][ T4521] batadv0 (unregistering): left promiscuous mode [ 782.664578][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 783.211972][ T4549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14452'. [ 783.542506][ T4561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14457'. [ 783.705426][ T5741] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 783.783223][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 784.481873][ T4594] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14467'. [ 784.861825][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 785.227447][ T4618] netlink: 'syz.2.14479': attribute type 8 has an invalid length. [ 785.236609][ T4620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.655256][ T4644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14489'. [ 785.676071][ T4644] xfrm1: entered promiscuous mode [ 785.681297][ T4644] xfrm1: entered allmulticast mode [ 785.690536][ T4644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14489'. [ 785.786713][ T5741] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 786.039249][ T4664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14497'. [ 786.622057][ T4700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14513'. [ 786.656416][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14514'. [ 786.823971][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.202070][ T4732] netlink: 'syz.1.14527': attribute type 1 has an invalid length. [ 787.220304][ T4732] netlink: 'syz.1.14527': attribute type 4 has an invalid length. [ 787.243264][ T4732] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.14527'. [ 787.304491][ T4736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14529'. [ 787.318921][ T4738] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14530'. [ 787.339873][ T4736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14529'. [ 787.561832][ T4755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.710366][ T4764] bridge9: entered promiscuous mode [ 787.715937][ T4764] bridge9: entered allmulticast mode [ 787.819023][ T4769] netlink: 10 bytes leftover after parsing attributes in process `syz.4.14544'. [ 787.863363][ T5741] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 787.977861][ T4777] Bluetooth: hci1: too big key_count value 29096 [ 788.919235][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 788.928030][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 789.951688][ T5741] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 790.929354][ T4809] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 790.984656][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 791.884973][ T4866] netlink: 'syz.2.14580': attribute type 1 has an invalid length. [ 791.991933][ T4866] 8021q: adding VLAN 0 to HW filter on device bond10 [ 792.026041][ T5741] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 792.038958][ T4872] bond10: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 792.692374][ T4896] netlink: 'syz.5.14589': attribute type 22 has an invalid length. [ 792.707923][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14589'. [ 792.737920][T10168] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.748058][ T4896] netlink: 'syz.5.14589': attribute type 22 has an invalid length. [ 792.756776][T10168] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.765712][T10168] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.774504][ T4896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14589'. [ 792.784339][T10168] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.064212][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 793.377303][ T4908] xfrm0 speed is unknown, defaulting to 1000 [ 794.111405][ T5741] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.144444][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.453471][ T4967] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.462039][ T4967] bridge0: entered allmulticast mode [ 795.491950][ T4968] bridge_slave_0: left allmulticast mode [ 795.513565][ T4968] bridge_slave_0: left promiscuous mode [ 795.525881][ T4968] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.190307][ T5741] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 796.325204][ T4978] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 796.357205][ T4978] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 797.234620][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 797.702238][ T5050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14638'. [ 797.778314][ T5050] 8021q: adding VLAN 0 to HW filter on device bond7 [ 797.822665][ T5055] bond7: (slave batadv2): Opening slave failed [ 797.863239][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 798.263977][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 798.419026][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14650'. [ 798.439771][ T5080] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 799.232387][ T5123] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 799.262607][ T5123] bond4: (slave lo): Enslaving as an active interface with an up link [ 799.293691][ T5123] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 799.315418][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 799.468647][ T5129] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.14669'. [ 799.772631][ T5139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14674'. [ 800.357059][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 801.383561][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 801.833258][ T5178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14688'. [ 801.948149][ T5174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.126579][ T5180] netlink: 'syz.4.14689': attribute type 1 has an invalid length. [ 802.255894][ T5180] 8021q: adding VLAN 0 to HW filter on device bond3 [ 802.265730][ T5184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14690'. [ 802.352700][ T5182] bond3: (slave geneve4): making interface the new active one [ 802.378012][ T5182] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 802.405622][ T1847] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 802.423820][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 802.434495][ T1847] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 802.458879][ T1847] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 802.477446][ T1847] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 803.259592][ T5204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.294561][ T1850] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 803.475119][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 803.566490][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14700'. [ 803.613190][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14700'. [ 803.648248][ T5210] netlink: 'syz.4.14700': attribute type 6 has an invalid length. [ 803.674728][ T5210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14700'. [ 803.713275][ T5210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14700'. [ 803.728554][ T5210] netlink: 'syz.4.14700': attribute type 6 has an invalid length. [ 804.199478][ T5223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14706'. [ 804.227202][ T5223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14706'. [ 804.254647][ T5223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14706'. [ 804.290580][ T5223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14706'. [ 804.504107][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 804.540357][ T5232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14709'. [ 805.025267][ T5258] netlink: 'syz.3.14718': attribute type 21 has an invalid length. [ 805.034304][ T5258] netlink: 'syz.3.14718': attribute type 22 has an invalid length. [ 805.049851][ T5258] netlink: 'syz.3.14718': attribute type 23 has an invalid length. [ 805.072604][ T5258] netlink: 'syz.3.14718': attribute type 25 has an invalid length. [ 805.083476][ T5258] netlink: 'syz.3.14718': attribute type 26 has an invalid length. [ 805.096230][ T5258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14718'. [ 805.432062][ T5281] netlink: 'syz.3.14728': attribute type 1 has an invalid length. [ 805.530843][ T5281] 8021q: adding VLAN 0 to HW filter on device bond8 [ 805.545781][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 805.630758][ T5284] bond8: (slave geneve3): making interface the new active one [ 805.661160][ T5284] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 806.430884][ T5322] netlink: 'syz.2.14743': attribute type 1 has an invalid length. [ 806.512881][ T5322] 8021q: adding VLAN 0 to HW filter on device bond11 [ 806.603105][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 806.634220][ T5327] bond11: (slave geneve4): making interface the new active one [ 806.674133][ T5327] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 806.716562][ T1850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.729115][ T30] audit: type=1800 audit(1780662569.814:8): pid=5330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.14745" name="memory.events" dev="tmpfs" ino=14495 res=0 errno=0 [ 806.766634][ T1850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.799307][ T1850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.810022][ T1850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.327396][ T30] audit: type=1800 audit(1780662570.414:9): pid=5348 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14752" name=20 dev="tmpfs" ino=14819 res=0 errno=0 [ 807.412006][ T5353] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 807.468270][ T5353] tipc: Enabled bearer , priority 16 [ 807.624809][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 807.700251][ T5365] pim6reg1: entered promiscuous mode [ 807.724444][ T5365] pim6reg1: entered allmulticast mode [ 808.196548][ T5391] netlink: 'syz.4.14769': attribute type 11 has an invalid length. [ 808.663678][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 808.753573][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.309673][ T5441] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 809.703499][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 810.158898][ T5478] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 810.174637][ T773] syzkaller1: tun_net_xmit 90 [ 810.181773][ T5478] syzkaller1: Linktype set failed because interface is up [ 810.743302][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.224318][ T5519] __nla_validate_parse: 1 callbacks suppressed [ 811.224340][ T5519] netlink: 244 bytes leftover after parsing attributes in process `syz.2.14810'. [ 811.795803][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.904156][ T5541] syzkaller1: entered promiscuous mode [ 811.920101][ T5541] syzkaller1: entered allmulticast mode [ 811.940376][ T5545] netlink: 'syz.5.14820': attribute type 1 has an invalid length. [ 812.130593][ T5545] 8021q: adding VLAN 0 to HW filter on device bond5 [ 812.242503][ T5549] bond5: (slave geneve2): making interface the new active one [ 812.286134][ T5549] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 812.316021][ T1847] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.336268][ T1847] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.364754][ T1847] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.384993][ T1847] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.823892][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 813.871692][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 814.353255][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14846'. [ 814.914880][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 814.924063][ T5648] netlink: 51 bytes leftover after parsing attributes in process `syz.4.14858'. [ 815.945683][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 816.058840][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14887'. [ 816.081261][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14887'. [ 816.099137][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14887'. [ 816.118478][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14887'. [ 816.134721][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14887'. [ 816.145091][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14887'. [ 816.942243][ T5793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.983920][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 816.994466][ T5796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.380611][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14911'. [ 817.777674][ T5812] syz_tun (unregistering): left allmulticast mode [ 818.025446][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 818.840018][ T5868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14929'. [ 818.850840][ T5868] netlink: 'syz.2.14929': attribute type 7 has an invalid length. [ 818.859458][ T5868] netlink: 'syz.2.14929': attribute type 8 has an invalid length. [ 818.868482][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14929'. [ 818.887430][ T5868] erspan0: entered promiscuous mode [ 818.895301][ T5868] erspan0: left promiscuous mode [ 819.063928][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 820.113367][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 820.903262][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 821.145013][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 821.280525][ T5843] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 821.477318][ T5930] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.14955'. [ 821.781649][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14963'. [ 821.793188][ T5948] netlink: 'syz.1.14963': attribute type 7 has an invalid length. [ 821.812510][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14963'. [ 822.186023][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 822.361013][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14977'. [ 822.377964][ T5976] netlink: 'syz.3.14977': attribute type 5 has an invalid length. [ 822.413411][ T5976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14977'. [ 822.470318][ T5976] geneve4: entered promiscuous mode [ 822.485830][ T5976] geneve4: entered allmulticast mode [ 822.506933][T30732] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 822.527520][T30732] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 822.559610][T30732] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 822.580196][T30732] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 823.191084][ T6019] syzkaller1: entered promiscuous mode [ 823.205807][ T6019] syzkaller1: entered allmulticast mode [ 823.224935][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 823.247898][ T6019] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 823.925175][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15006'. [ 824.103740][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 824.264814][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 824.839008][ T6065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15015'. [ 825.010323][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15017'. [ 825.045236][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15017'. [ 825.209432][ T6075] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15020'. [ 825.303426][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 825.381479][ T6083] sctp: [Deprecated]: syz.2.15023 (pid 6083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 825.381479][ T6083] Use struct sctp_sack_info instead [ 825.398127][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 825.427003][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15024'. [ 825.460450][ T6085] netlink: 'syz.5.15024': attribute type 9 has an invalid length. [ 826.216180][ T6115] netlink: 'syz.2.15039': attribute type 4 has an invalid length. [ 826.267487][ T6115] netlink: 'syz.2.15039': attribute type 4 has an invalid length. [ 826.344058][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 826.820998][ T6135] syzkaller1: entered promiscuous mode [ 826.826863][ T6135] syzkaller1: entered allmulticast mode [ 826.990757][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15052'. [ 827.091785][ T6143] hsr_slave_1 (unregistering): left promiscuous mode [ 827.384304][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15055'. [ 827.395868][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 827.903457][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15062'. [ 827.982803][ T6178] netlink: 'syz.3.15063': attribute type 1 has an invalid length. [ 828.073718][ T6174] 8021q: adding VLAN 0 to HW filter on device bond12 [ 828.095359][ T6176] bond12: Unable to set down delay as MII monitoring is disabled [ 828.181702][ T6178] 8021q: adding VLAN 0 to HW filter on device bond9 [ 828.227956][ T6179] bond9: option lp_interval: invalid value (18446744073709551607) [ 828.300353][ T6179] bond9: option lp_interval: allowed values 1 - 2147483647 [ 828.365731][ T6161] xfrm0 speed is unknown, defaulting to 1000 [ 828.424443][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 828.768908][ T6163] netlink: 45 bytes leftover after parsing attributes in process `syz.5.15057'. [ 828.790417][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15070'. [ 829.225011][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 829.385442][ T6215] netlink: 'syz.3.15079': attribute type 19 has an invalid length. [ 829.396507][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15079'. [ 829.466735][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 829.471825][ T6217] netlink: 'syz.5.15080': attribute type 6 has an invalid length. [ 829.510965][ T6215] netlink: 'syz.3.15079': attribute type 19 has an invalid length. [ 829.559088][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15079'. [ 829.985363][ T6234] syzkaller1: entered promiscuous mode [ 829.996933][ T6234] syzkaller1: entered allmulticast mode [ 830.155635][ T6236] bond13: option ad_select: invalid value (34) [ 830.186456][ T6236] bond13 (unregistering): Released all slaves [ 830.503798][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 830.511151][ T6223] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 830.520005][ T6223] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 830.653752][ T6262] netlink: 'syz.4.15102': attribute type 4 has an invalid length. [ 830.699169][ T6262] netlink: 'syz.4.15102': attribute type 4 has an invalid length. [ 831.553904][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 832.146849][ T6335] netlink: 'syz.2.15133': attribute type 1 has an invalid length. [ 832.196701][ T6335] bond13: entered promiscuous mode [ 832.221194][ T6335] bond13: entered allmulticast mode [ 832.238448][ T6335] 8021q: adding VLAN 0 to HW filter on device bond13 [ 832.291198][ T6339] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 6 [ 832.594142][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 832.718265][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15141'. [ 833.137085][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15151'. [ 833.306553][ T6389] netlink: 'syz.2.15156': attribute type 1 has an invalid length. [ 833.624009][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 833.648758][ T6385] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 834.021310][ T6414] bridge10: entered promiscuous mode [ 834.030570][ T6414] bridge10: entered allmulticast mode [ 834.306738][ T6434] netlink: 'syz.3.15175': attribute type 11 has an invalid length. [ 834.343950][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 834.517095][ T6452] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.15183'. [ 834.538389][ T6452] netlink: Unknown conntrack attr (0) [ 834.673268][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 835.538212][ T1850] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.539858][ T6498] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15202'. [ 835.560587][ T1850] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.589613][ T1850] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20002 - 0 [ 835.631547][ T1850] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.650752][ T6501] netlink: 'syz.4.15203': attribute type 13 has an invalid length. [ 835.660830][ T1850] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.675926][ T1850] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20002 - 0 [ 835.693377][ T1850] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.704056][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 835.713807][ T1850] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.734591][ T1850] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20002 - 0 [ 835.895387][ T6505] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 835.929258][ T1850] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.944607][ T1850] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.974591][ T1850] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20002 - 0 [ 836.330845][ T6535] netlink: 'syz.1.15215': attribute type 4 has an invalid length. [ 836.369276][ T6535] netlink: 'syz.1.15215': attribute type 4 has an invalid length. [ 836.444097][ T774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.476623][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15216'. [ 836.493650][ T6544] netlink: 'syz.4.15216': attribute type 26 has an invalid length. [ 836.508712][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15216'. [ 836.539635][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15216'. [ 836.572291][ T6544] netlink: 'syz.4.15216': attribute type 26 has an invalid length. [ 836.613769][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15216'. [ 836.744270][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 836.924055][ T774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.027874][ T6564] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 837.202139][ T6573] netlink: 'syz.3.15227': attribute type 7 has an invalid length. [ 837.236798][ T6573] netlink: 'syz.3.15227': attribute type 8 has an invalid length. [ 837.255018][ T6573] netlink: 'syz.3.15227': attribute type 8 has an invalid length. [ 837.264144][ T6573] netlink: 'syz.3.15227': attribute type 4 has an invalid length. [ 837.276406][ T6573] netlink: 'syz.3.15227': attribute type 7 has an invalid length. [ 837.286474][ T6573] netlink: 207236 bytes leftover after parsing attributes in process `syz.3.15227'. [ 837.337529][ T6581] netlink: del zone limit has 8 unknown bytes [ 837.755910][ T6601] netlink: 'syz.5.15239': attribute type 3 has an invalid length. [ 837.785624][ T6601] netlink: 196 bytes leftover after parsing attributes in process `syz.5.15239'. [ 837.838203][ T6601] NCSI netlink: No device for ifindex 0 [ 838.387131][ T6615] IPv6: sit3: Disabled Multicast RS [ 838.439511][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15249'. [ 838.828202][ T24] net_ratelimit: 1 callbacks suppressed [ 838.828225][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 839.209512][ T6646] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.15257'. [ 839.468480][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 839.865001][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 839.928077][ T6674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.176158][ T6688] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.15275'. [ 840.288866][ T6696] netlink: 56 bytes leftover after parsing attributes in process `syz.4.15279'. [ 840.507445][ T6710] netlink: 168 bytes leftover after parsing attributes in process `syz.4.15283'. [ 840.903695][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 841.943907][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 841.973204][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15317'. [ 842.018420][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15317'. [ 842.171818][ T6801] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.15330'. [ 842.377281][ T6805] validate_nla: 2 callbacks suppressed [ 842.377382][ T6805] netlink: 'syz.4.15323': attribute type 2 has an invalid length. [ 842.993430][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 843.177438][ T30] audit: type=1800 audit(1780662606.264:10): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15331" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=15475 res=0 errno=0 [ 844.026401][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 844.332009][ T6844] syzkaller1: entered promiscuous mode [ 844.347272][ T6844] syzkaller1: entered allmulticast mode [ 844.584845][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 844.674462][ T6848] netlink: 'syz.1.15343': attribute type 3 has an invalid length. [ 844.874413][ T6856] syzkaller1: entered promiscuous mode [ 844.890152][ T6856] syzkaller1: entered allmulticast mode [ 845.064430][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 846.105357][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 846.866551][ T6903] syzkaller0: refused to change device tx_queue_len [ 847.020638][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15365'. [ 847.041777][ T6907] netlink: 'syz.4.15365': attribute type 1 has an invalid length. [ 847.058787][ T6907] netlink: 'syz.4.15365': attribute type 2 has an invalid length. [ 847.146125][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 847.261402][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15371'. [ 847.380411][ T6925] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.15374'. [ 848.029431][ T6957] bond14: (slave 26±ÿÿÿÿa–ïD): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 848.048148][ T6957] bond14: (slave 26±ÿÿÿÿa–ïD): Enslaving as an active interface with an up link [ 848.058285][ T6957] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 848.183987][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 848.359638][ T30] audit: type=1800 audit(1780662611.444:11): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.15394" name="r" dev="tmpfs" ino=15540 res=0 errno=0 [ 849.088975][ T7003] netlink: 'syz.5.15405': attribute type 13 has an invalid length. [ 849.106892][ T7003] netlink: 'syz.5.15405': attribute type 13 has an invalid length. [ 849.165943][ T7005] netlink: 'syz.2.15406': attribute type 13 has an invalid length. [ 849.223858][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 849.665345][ T7020] netlink: 'syz.1.15411': attribute type 1 has an invalid length. [ 849.707550][ T7020] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.15411'. [ 849.721536][ T7023] netlink: 204 bytes leftover after parsing attributes in process `syz.2.15412'. [ 849.755522][ T7023] netlink: 84 bytes leftover after parsing attributes in process `syz.2.15412'. [ 850.053722][ T774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.284290][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 850.616609][ T7056] netlink: 'syz.4.15428': attribute type 1 has an invalid length. [ 850.685153][ T7056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 850.734741][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15430'. [ 850.744927][ T7061] bond4: (slave gretap3): making interface the new active one [ 850.764561][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15430'. [ 850.779407][ T7061] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 850.784152][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15430'. [ 850.798779][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15430'. [ 851.063893][ T774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.268357][ T7076] netlink: 'syz.4.15436': attribute type 1 has an invalid length. [ 851.303496][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 851.410824][ T7084] netlink: Conntrack attr has 3 unknown bytes [ 851.640734][ T7090] syzkaller1: entered promiscuous mode [ 851.662037][ T7090] syzkaller1: entered allmulticast mode [ 852.099571][ T7107] netlink: 'syz.3.15448': attribute type 1 has an invalid length. [ 852.114946][ T7105] __nla_validate_parse: 12 callbacks suppressed [ 852.114970][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15449'. [ 852.136919][ T7105] netlink: 'syz.2.15449': attribute type 30 has an invalid length. [ 852.169123][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15449'. [ 852.226073][ T7107] 8021q: adding VLAN 0 to HW filter on device bond10 [ 852.237417][ T7116] netlink: 'syz.2.15449': attribute type 30 has an invalid length. [ 852.318222][ T7115] bond10: (slave geneve5): making interface the new active one [ 852.328434][ T7115] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 852.343778][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 852.442331][T10164] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.472398][T10164] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.530567][T10164] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.552339][T10164] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.727188][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15461'. [ 852.736914][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15461'. [ 852.956601][ T7144] batman_adv: batadv0: Interface deactivated: vlan5 [ 853.085144][ T7144] batman_adv: batadv0: Interface deactivated: wlan0 [ 853.384735][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 853.782168][ T7196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15485'. [ 854.210380][ T7215] veth0: entered promiscuous mode [ 854.232128][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15493'. [ 854.423790][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 854.660520][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15497'. [ 854.919942][ T7237] netlink: 'syz.4.15503': attribute type 18 has an invalid length. [ 854.937183][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15503'. [ 854.955663][ T7239] netlink: 'syz.2.15504': attribute type 4 has an invalid length. [ 854.964051][ T7237] netlink: 'syz.4.15503': attribute type 18 has an invalid length. [ 854.973509][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15503'. [ 855.467382][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 856.320273][ T7297] netlink: 'syz.2.15529': attribute type 25 has an invalid length. [ 856.330931][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15529'. [ 856.341797][ T7297] netlink: 'syz.2.15529': attribute type 25 has an invalid length. [ 856.503816][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 857.543728][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 858.110651][ T7243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.493505][ T7367] __nla_validate_parse: 1 callbacks suppressed [ 858.493526][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15558'. [ 858.516073][ T7367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15558'. [ 858.588207][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 859.404546][ T7406] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15576'. [ 859.536445][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15577'. [ 859.552037][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15577'. [ 859.569426][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15577'. [ 859.589199][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15577'. [ 859.624340][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 859.791227][ T7397] xfrm0 speed is unknown, defaulting to 1000 [ 860.666928][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 861.053832][ T7469] netlink: 112 bytes leftover after parsing attributes in process `syz.5.15604'. [ 861.703944][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 862.581633][ T7538] bond14: (slave 26±ÿÿÿÿa–ïD): Releasing backup interface [ 862.604477][ T7538] bond14: (slave 26±ÿÿÿÿa–ïD): last VLAN challenged slave left bond - VLAN blocking is removed [ 862.641041][ T7538] bond15: (slave 26±ÿÿÿÿa–ïD): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 862.660117][ T7538] bond15: (slave 26±ÿÿÿÿa–ïD): Enslaving as an active interface with an up link [ 862.671110][ T7538] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 862.757213][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 862.847543][ T7549] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 862.862734][ T7549] syzkaller1: Refused to change device type [ 863.430802][ T7579] IPv6: sit2: Disabled Multicast RS [ 863.468221][ T7579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15650'. [ 863.643427][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 863.784165][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 863.813024][ T24] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 863.845650][ T769] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 863.915673][ T769] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 863.937535][ T769] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 863.958892][ T769] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 864.063394][T27508] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 864.077749][T27508] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 864.627184][ T7606] xfrm0: Caught tx_queue_len zero misconfig [ 864.665381][T27508] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 864.825733][T27508] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 864.831624][ T5734] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 865.365352][ T7626] bond4: entered promiscuous mode [ 865.370663][ T7626] 8021q: adding VLAN 0 to HW filter on device bond4 [ 865.864260][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 866.905272][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 867.149890][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15693'. [ 867.944090][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 868.135049][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15717'. [ 868.186237][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15717'. [ 868.189691][ T7735] macvtap2: entered promiscuous mode [ 868.207742][ T7738] sock: sock_set_timeout: `syz.1.15716' (pid 7738) tries to set negative timeout [ 868.217424][ T7735] erspan0: entered promiscuous mode [ 868.245570][ T7735] macvtap2: entered allmulticast mode [ 868.258781][ T7735] erspan0: entered allmulticast mode [ 868.791219][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15727'. [ 868.815059][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15728'. [ 868.824936][ T7764] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 868.983541][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 869.873784][ T7801] syzkaller1: entered promiscuous mode [ 869.893919][ T7801] syzkaller1: entered allmulticast mode [ 870.009045][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15746'. [ 870.024925][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 870.441108][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15754'. [ 871.062648][ T7844] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.15763'. [ 871.076227][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 871.130127][ T7846] syzkaller1: entered promiscuous mode [ 871.148073][ T7846] syzkaller1: entered allmulticast mode [ 871.229219][ T7853] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 871.320821][ T7860] ip6gre1: entered promiscuous mode [ 871.326805][ T7860] ip6gre1: entered allmulticast mode [ 871.544899][T10164] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 871.844697][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15780'. [ 872.103421][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 872.417019][ T7881] xfrm0 speed is unknown, defaulting to 1000 [ 872.924859][ T7932] syzkaller1: entered promiscuous mode [ 872.981405][ T7932] syzkaller1: entered allmulticast mode [ 873.145662][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 873.824735][ T7967] netlink: 'syz.5.15800': attribute type 1 has an invalid length. [ 873.910113][ T7967] bond6: entered promiscuous mode [ 873.924813][ T7967] 8021q: adding VLAN 0 to HW filter on device bond6 [ 874.064822][ T7974] 8021q: adding VLAN 0 to HW filter on device bond6 [ 874.083843][ T7974] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 874.096029][ T7974] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 874.110800][ T7974] bond6: (slave ip6gre2): making interface the new active one [ 874.121750][ T7974] ip6gre2: entered promiscuous mode [ 874.129591][ T7974] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 874.151275][ T7927] xfrm0 speed is unknown, defaulting to 1000 [ 874.185576][ T769] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 874.638500][ T7987] netlink: 'syz.2.15804': attribute type 1 has an invalid length. [ 875.016298][ T7987] bond16: entered promiscuous mode [ 875.022059][ T7987] 8021q: adding VLAN 0 to HW filter on device bond16 [ 875.137454][ T7992] 8021q: adding VLAN 0 to HW filter on device bond16 [ 875.167673][ T7992] bond16: (slave ipip1): The slave device specified does not support setting the MAC address [ 875.212166][ T7992] bond16: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 875.236401][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 875.271960][ T7992] bond16: (slave ipip1): making interface the new active one [ 875.307347][ T7992] ipip1: entered promiscuous mode [ 875.317247][ T7992] bond16: (slave ipip1): Enslaving as an active interface with an up link [ 875.679359][ T8014] tipc: Failed to remove unknown binding: 66,1,1/10463914:1021911757/1021911759 [ 876.296068][ T769] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 876.595413][ T8061] netlink: 276 bytes leftover after parsing attributes in process `syz.2.15832'. [ 876.971264][ T8077] sit0: entered promiscuous mode [ 877.008847][ T8077] netlink: 'syz.5.15837': attribute type 1 has an invalid length. [ 877.033154][ T8077] netlink: 1 bytes leftover after parsing attributes in process `syz.5.15837'. [ 877.128025][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15846'. [ 877.303897][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 877.732076][ T8123] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15860'. [ 878.064570][ T8141] netlink: 'syz.5.15866': attribute type 1 has an invalid length. [ 878.190513][ T8141] bond7: entered promiscuous mode [ 878.212359][ T8141] 8021q: adding VLAN 0 to HW filter on device bond7 [ 878.345464][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 878.470216][ T8155] sctp: [Deprecated]: syz.3.15872 (pid 8155) Use of int in max_burst socket option. [ 878.470216][ T8155] Use struct sctp_assoc_value instead [ 879.080981][ T8182] block nbd2: reconnected socket [ 879.096116][ T8182] block nbd2: Unsupported socket: should be TCP or UNIX. [ 879.110107][T25014] block nbd2: Receive control failed (result -104) [ 879.394728][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 879.500265][ T8197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 879.595575][ T8199] xt_CT: You must specify a L4 protocol and not use inversions on it [ 879.828856][ T8205] syzkaller0: entered promiscuous mode [ 879.835369][ T8205] syzkaller0: entered allmulticast mode [ 880.434635][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 881.482593][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 882.449210][ T1670] block nbd2: Connection timed out, retrying (0/1 alive) [ 882.472735][ T1670] block nbd2: Connection timed out, retrying (0/1 alive) [ 882.480113][ T1670] block nbd2: Connection timed out, retrying (0/1 alive) [ 882.501161][ T25] block nbd2: Dead connection, failed to find a fallback [ 882.546263][ T25] block nbd2: shutting down sockets [ 882.601070][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 882.608150][ T1670] block nbd2: Connection timed out, retrying (0/1 alive) [ 882.619463][ T25] blk_print_req_error: 138 callbacks suppressed [ 882.619494][ T25] I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 882.648081][ T1670] block nbd2: Connection timed out, retrying (0/1 alive) [ 882.661754][ T1670] block nbd2: Connection timed out, retrying (0/1 alive) [ 882.686993][ T1670] block nbd2: Connection timed out, retrying (0/1 alive) [ 882.701340][ T25] buffer_io_error: 18 callbacks suppressed [ 882.701359][ T25] Buffer I/O error on dev nbd2, logical block 1, async page read [ 882.716518][ T1670] block nbd2: Connection timed out, retrying (0/1 alive) [ 882.729132][ T25] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 882.738310][ T25] Buffer I/O error on dev nbd2, logical block 0, async page read [ 882.747117][ T25] I/O error, dev nbd2, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 882.757708][ T25] Buffer I/O error on dev nbd2, logical block 7, async page read [ 882.765682][ T25] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 882.775138][ T25] Buffer I/O error on dev nbd2, logical block 6, async page read [ 882.783127][ T25] I/O error, dev nbd2, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 882.792220][ T25] Buffer I/O error on dev nbd2, logical block 5, async page read [ 882.800259][ T25] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 882.809383][ T25] Buffer I/O error on dev nbd2, logical block 4, async page read [ 882.817380][ T25] I/O error, dev nbd2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 882.827504][ T25] Buffer I/O error on dev nbd2, logical block 3, async page read [ 882.835625][ T25] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 882.844773][ T25] Buffer I/O error on dev nbd2, logical block 2, async page read [ 882.860734][ T7786] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 882.869998][ T7786] Buffer I/O error on dev nbd2, logical block 0, async page read [ 882.878133][ T7786] I/O error, dev nbd2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 882.887585][ T7786] Buffer I/O error on dev nbd2, logical block 1, async page read [ 882.902730][ T7786] ldm_validate_partition_table(): Disk read failed. [ 882.914538][ T7786] Dev nbd2: unable to read RDB block 0 [ 882.927288][ T7786] nbd2: unable to read partition table [ 882.955528][ T7786] ldm_validate_partition_table(): Disk read failed. [ 882.978490][ T7786] Dev nbd2: unable to read RDB block 0 [ 882.991348][ T7786] nbd2: unable to read partition table [ 883.546373][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 884.583868][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 884.587127][ T8283] syzkaller0: entered promiscuous mode [ 884.598425][ T8283] syzkaller0: entered allmulticast mode [ 885.663394][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 886.670907][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 887.703431][ T774] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 887.778260][ T8323] ±ÿÿÿÿa–ïD: Caught tx_queue_len zero misconfig [ 888.074064][ T8337] netlink: 'syz.2.15939': attribute type 1 has an invalid length. [ 888.208884][ T8337] bond17: entered promiscuous mode [ 888.236919][ T8337] 8021q: adding VLAN 0 to HW filter on device bond17 [ 888.342003][ T8345] 8021q: adding VLAN 0 to HW filter on device bond17 [ 888.360134][ T8345] bond17: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 888.371662][ T8345] bond17: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 888.408374][ T8345] bond17: (slave ip6gre3): making interface the new active one [ 888.424658][ T8345] ip6gre3: entered promiscuous mode [ 888.446310][ T8345] bond17: (slave ip6gre3): Enslaving as an active interface with an up link [ 888.458728][ T8305] xfrm0 speed is unknown, defaulting to 1000 [ 888.743877][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 889.087719][ T8358] xfrm0 speed is unknown, defaulting to 1000 [ 889.166646][ T8369] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.15950'. [ 889.667359][ T8374] ±ÿ: Caught tx_queue_len zero misconfig [ 889.778918][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15954'. [ 889.790190][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 889.804526][ T8378] netlink: 121 bytes leftover after parsing attributes in process `syz.5.15954'. [ 890.170164][ T8391] netlink: 'syz.2.15959': attribute type 4 has an invalid length. [ 890.260109][ T8397] netlink: 'syz.2.15959': attribute type 4 has an invalid length. [ 890.557190][ T8400] netlink: 'syz.2.15961': attribute type 1 has an invalid length. [ 890.570828][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15962'. [ 890.597224][ T8402] netlink: 'syz.5.15962': attribute type 11 has an invalid length. [ 890.679633][ T8400] bond18: entered promiscuous mode [ 890.701060][ T8400] 8021q: adding VLAN 0 to HW filter on device bond18 [ 890.823961][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15962'. [ 890.833563][ T769] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 890.850351][ T8402] netlink: 'syz.5.15962': attribute type 11 has an invalid length. [ 890.858745][ T8405] 8021q: adding VLAN 0 to HW filter on device bond18 [ 890.873827][ T8405] bond18: (slave vti0): The slave device specified does not support setting the MAC address [ 890.897377][ T8405] bond18: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 890.924527][ T8405] bond18: (slave vti0): making interface the new active one [ 890.931977][ T8405] vti0: entered promiscuous mode [ 890.940424][ T8405] bond18: (slave vti0): Enslaving as an active interface with an up link [ 891.191706][ T8413] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.15966'. [ 891.241604][ T8416] netlink: 'syz.3.15968': attribute type 1 has an invalid length. [ 891.375683][ T8416] bond11: entered promiscuous mode [ 891.396071][ T8416] 8021q: adding VLAN 0 to HW filter on device bond11 [ 891.506347][ T8421] 8021q: adding VLAN 0 to HW filter on device bond11 [ 891.514119][ T8421] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 891.524938][ T8421] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 891.549752][ T8421] bond11: (slave ip6gre1): making interface the new active one [ 891.569011][ T8421] ip6gre1: entered promiscuous mode [ 891.588220][ T8421] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 891.619917][ T8428] bridge0: port 4(vlan6) entered blocking state [ 891.653447][ T8428] bridge0: port 4(vlan6) entered disabled state [ 891.674609][ T8428] vlan6: entered allmulticast mode [ 891.691207][ T8428] geneve0: entered allmulticast mode [ 891.707128][ T8428] vlan6: entered promiscuous mode [ 891.724110][ T8428] geneve0: entered promiscuous mode [ 891.876702][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 892.319602][ T8450] netlink: 'syz.5.15980': attribute type 3 has an invalid length. [ 892.854227][ T8470] syzkaller1: entered promiscuous mode [ 892.870087][ T8470] syzkaller1: entered allmulticast mode [ 892.914086][ T769] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 893.944480][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 894.710181][ T8507] bridge0: entered allmulticast mode [ 894.740854][ T8507] bridge_slave_1: left allmulticast mode [ 894.749959][ T8507] bridge_slave_1: left promiscuous mode [ 894.765191][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.869455][ T8507] [ 894.871840][ T8507] ====================================================== [ 894.878912][ T8507] WARNING: possible circular locking dependency detected [ 894.886062][ T8507] syzkaller #0 Not tainted [ 894.890501][ T8507] ------------------------------------------------------ [ 894.897581][ T8507] syz.2.16003/8507 is trying to acquire lock: [ 894.903667][ T8507] ffff88801be8d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 894.913654][ T8507] [ 894.913654][ T8507] but task is already holding lock: [ 894.921041][ T8507] ffffffff8f3901a0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 894.929877][ T8507] [ 894.929877][ T8507] which lock already depends on the new lock. [ 894.929877][ T8507] [ 894.940307][ T8507] [ 894.940307][ T8507] the existing dependency chain (in reverse order) is: [ 894.949348][ T8507] [ 894.949348][ T8507] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 894.956650][ T8507] __mutex_lock+0x1a3/0x1550 [ 894.961801][ T8507] get_device_parent+0x16f/0x3a0 [ 894.967299][ T8507] device_add+0x2e1/0xbb0 [ 894.972158][ T8507] device_create+0x269/0x300 [ 894.977274][ T8507] msr_device_create+0x33/0x50 [ 894.982586][ T8507] cpuhp_invoke_callback+0x445/0x860 [ 894.988403][ T8507] cpuhp_thread_fun+0x36b/0x780 [ 894.993783][ T8507] smpboot_thread_fn+0x541/0xa50 [ 894.999257][ T8507] kthread+0x389/0x470 [ 895.003852][ T8507] ret_from_fork+0x514/0xb70 [ 895.008988][ T8507] ret_from_fork_asm+0x1a/0x30 [ 895.014277][ T8507] [ 895.014277][ T8507] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 895.021843][ T8507] cpuhp_thread_fun+0x127/0x780 [ 895.027218][ T8507] smpboot_thread_fn+0x541/0xa50 [ 895.032682][ T8507] kthread+0x389/0x470 [ 895.037278][ T8507] ret_from_fork+0x514/0xb70 [ 895.042390][ T8507] ret_from_fork_asm+0x1a/0x30 [ 895.047678][ T8507] [ 895.047678][ T8507] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 895.055419][ T8507] cpus_read_lock+0x42/0x160 [ 895.060532][ T8507] static_key_slow_inc+0x12/0x30 [ 895.066013][ T8507] nbd_genl_reconfigure+0x132f/0x1ea0 [ 895.071963][ T8507] genl_family_rcv_msg_doit+0x22a/0x330 [ 895.078085][ T8507] genl_rcv_msg+0x61c/0x7a0 [ 895.083122][ T8507] netlink_rcv_skb+0x232/0x4b0 [ 895.088411][ T8507] genl_rcv+0x28/0x40 [ 895.092921][ T8507] netlink_unicast+0x75c/0x8e0 [ 895.098212][ T8507] netlink_sendmsg+0x813/0xb40 [ 895.103502][ T8507] ____sys_sendmsg+0x972/0x9f0 [ 895.108789][ T8507] ___sys_sendmsg+0x2a5/0x360 [ 895.113998][ T8507] __x64_sys_sendmsg+0x1bd/0x2a0 [ 895.119460][ T8507] do_syscall_64+0x174/0x580 [ 895.124576][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.130995][ T8507] [ 895.130995][ T8507] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 895.138647][ T8507] __mutex_lock+0x1a3/0x1550 [ 895.143761][ T8507] nbd_queue_rq+0x37b/0x1100 [ 895.148882][ T8507] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 895.155014][ T8507] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 895.161897][ T8507] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 895.168403][ T8507] blk_mq_run_hw_queue+0x348/0x4f0 [ 895.174038][ T8507] blk_mq_dispatch_list+0xd16/0xe10 [ 895.179762][ T8507] blk_mq_flush_plug_list+0x48d/0x570 [ 895.185657][ T8507] __blk_flush_plug+0x3ed/0x4d0 [ 895.191076][ T8507] __submit_bio+0x28d/0x580 [ 895.196105][ T8507] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 895.202267][ T8507] block_read_full_folio+0x599/0x830 [ 895.208098][ T8507] filemap_read_folio+0x137/0x3b0 [ 895.213654][ T8507] do_read_cache_folio+0x358/0x590 [ 895.219290][ T8507] read_part_sector+0xb6/0x2b0 [ 895.224612][ T8507] adfspart_check_ICS+0xb1/0x960 [ 895.230071][ T8507] bdev_disk_changed+0x817/0x1770 [ 895.235620][ T8507] blkdev_get_whole+0x380/0x510 [ 895.241107][ T8507] bdev_open+0x31e/0xd30 [ 895.245873][ T8507] blkdev_open+0x470/0x610 [ 895.250813][ T8507] do_dentry_open+0x822/0x13a0 [ 895.256117][ T8507] vfs_open+0x3b/0x340 [ 895.260712][ T8507] path_openat+0x2e08/0x3860 [ 895.265834][ T8507] do_file_open+0x23e/0x4a0 [ 895.270863][ T8507] do_sys_openat2+0x113/0x200 [ 895.276065][ T8507] __x64_sys_openat+0x138/0x170 [ 895.281441][ T8507] do_syscall_64+0x174/0x580 [ 895.286552][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.292966][ T8507] [ 895.292966][ T8507] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 895.300194][ T8507] __mutex_lock+0x1a3/0x1550 [ 895.305308][ T8507] nbd_queue_rq+0xc6/0x1100 [ 895.310348][ T8507] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 895.316418][ T8507] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 895.323275][ T8507] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 895.329784][ T8507] blk_mq_run_hw_queue+0x348/0x4f0 [ 895.335418][ T8507] blk_mq_dispatch_list+0xd16/0xe10 [ 895.341140][ T8507] blk_mq_flush_plug_list+0x48d/0x570 [ 895.347040][ T8507] __blk_flush_plug+0x3ed/0x4d0 [ 895.352423][ T8507] __submit_bio+0x28d/0x580 [ 895.357453][ T8507] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 895.363633][ T8507] block_read_full_folio+0x599/0x830 [ 895.369444][ T8507] filemap_read_folio+0x137/0x3b0 [ 895.375006][ T8507] do_read_cache_folio+0x358/0x590 [ 895.380648][ T8507] read_part_sector+0xb6/0x2b0 [ 895.385935][ T8507] adfspart_check_ICS+0xb1/0x960 [ 895.391403][ T8507] bdev_disk_changed+0x817/0x1770 [ 895.396973][ T8507] blkdev_get_whole+0x380/0x510 [ 895.402366][ T8507] bdev_open+0x31e/0xd30 [ 895.407155][ T8507] blkdev_open+0x470/0x610 [ 895.412096][ T8507] do_dentry_open+0x822/0x13a0 [ 895.417384][ T8507] vfs_open+0x3b/0x340 [ 895.421975][ T8507] path_openat+0x2e08/0x3860 [ 895.427105][ T8507] do_file_open+0x23e/0x4a0 [ 895.432135][ T8507] do_sys_openat2+0x113/0x200 [ 895.437353][ T8507] __x64_sys_openat+0x138/0x170 [ 895.442731][ T8507] do_syscall_64+0x174/0x580 [ 895.447856][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.454292][ T8507] [ 895.454292][ T8507] -> #5 (set->srcu){.+.+}-{0:0}: [ 895.461440][ T8507] __synchronize_srcu+0xca/0x300 [ 895.466913][ T8507] elevator_switch+0x1e8/0x7a0 [ 895.472294][ T8507] elevator_change+0x2cc/0x450 [ 895.477584][ T8507] elevator_set_default+0x36c/0x430 [ 895.483314][ T8507] blk_register_queue+0x3e9/0x4e0 [ 895.488866][ T8507] __add_disk+0x677/0xd50 [ 895.493726][ T8507] add_disk_fwnode+0xfb/0x480 [ 895.498933][ T8507] nbd_dev_add+0x72c/0xb50 [ 895.503879][ T8507] nbd_init+0x168/0x1f0 [ 895.508646][ T8507] do_one_initcall+0x250/0x870 [ 895.513951][ T8507] do_initcall_level+0x104/0x190 [ 895.519417][ T8507] do_initcalls+0x59/0xa0 [ 895.524286][ T8507] kernel_init_freeable+0x2a6/0x3e0 [ 895.530008][ T8507] kernel_init+0x1d/0x1d0 [ 895.534951][ T8507] ret_from_fork+0x514/0xb70 [ 895.540064][ T8507] ret_from_fork_asm+0x1a/0x30 [ 895.545359][ T8507] [ 895.545359][ T8507] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 895.553185][ T8507] __mutex_lock+0x1a3/0x1550 [ 895.558322][ T8507] elevator_change+0x1b3/0x450 [ 895.563698][ T8507] elevator_set_none+0xb5/0x140 [ 895.569090][ T8507] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 895.575514][ T8507] nbd_start_device+0x17f/0xb10 [ 895.580895][ T8507] nbd_genl_connect+0x165b/0x1cf0 [ 895.586449][ T8507] genl_family_rcv_msg_doit+0x22a/0x330 [ 895.592526][ T8507] genl_rcv_msg+0x61c/0x7a0 [ 895.597557][ T8507] netlink_rcv_skb+0x232/0x4b0 [ 895.602846][ T8507] genl_rcv+0x28/0x40 [ 895.607354][ T8507] netlink_unicast+0x75c/0x8e0 [ 895.612644][ T8507] netlink_sendmsg+0x813/0xb40 [ 895.617935][ T8507] ____sys_sendmsg+0x972/0x9f0 [ 895.623254][ T8507] ___sys_sendmsg+0x2a5/0x360 [ 895.628457][ T8507] __x64_sys_sendmsg+0x1bd/0x2a0 [ 895.633930][ T8507] do_syscall_64+0x174/0x580 [ 895.639060][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.645508][ T8507] [ 895.645508][ T8507] -> #3 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 895.654312][ T8507] blk_alloc_queue+0x546/0x680 [ 895.659607][ T8507] __blk_mq_alloc_disk+0x197/0x390 [ 895.665249][ T8507] nbd_dev_add+0x499/0xb50 [ 895.670376][ T8507] nbd_init+0x168/0x1f0 [ 895.675152][ T8507] do_one_initcall+0x250/0x870 [ 895.680446][ T8507] do_initcall_level+0x104/0x190 [ 895.685906][ T8507] do_initcalls+0x59/0xa0 [ 895.690765][ T8507] kernel_init_freeable+0x2a6/0x3e0 [ 895.696487][ T8507] kernel_init+0x1d/0x1d0 [ 895.701521][ T8507] ret_from_fork+0x514/0xb70 [ 895.706842][ T8507] ret_from_fork_asm+0x1a/0x30 [ 895.712152][ T8507] [ 895.712152][ T8507] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 895.719373][ T8507] fs_reclaim_acquire+0x71/0x100 [ 895.724850][ T8507] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 895.731104][ T8507] alloc_inode+0xb8/0x1b0 [ 895.735961][ T8507] iget_locked+0x131/0x6a0 [ 895.740928][ T8507] kernfs_get_inode+0x4f/0x780 [ 895.746219][ T8507] kernfs_get_tree+0x5cd/0x980 [ 895.751508][ T8507] sysfs_get_tree+0x46/0x110 [ 895.756638][ T8507] vfs_get_tree+0x92/0x2a0 [ 895.761588][ T8507] do_new_mount+0x341/0xd30 [ 895.766699][ T8507] __se_sys_mount+0x31d/0x420 [ 895.771904][ T8507] do_syscall_64+0x174/0x580 [ 895.777036][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.783476][ T8507] [ 895.783476][ T8507] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 895.791479][ T8507] down_write+0x96/0x200 [ 895.796314][ T8507] kernfs_remove_by_name_ns+0x4e/0x140 [ 895.802393][ T8507] device_links_driver_bound+0x54f/0x14e0 [ 895.808640][ T8507] driver_bound+0xd8/0x2e0 [ 895.813613][ T8507] really_probe+0x789/0xaf0 [ 895.818639][ T8507] __driver_probe_device+0x1ef/0x380 [ 895.824443][ T8507] driver_probe_device+0x4f/0x240 [ 895.829992][ T8507] __device_attach_driver+0x279/0x430 [ 895.835885][ T8507] bus_for_each_drv+0x258/0x2f0 [ 895.841262][ T8507] __device_attach+0x2c5/0x450 [ 895.846546][ T8507] device_initial_probe+0xa1/0xd0 [ 895.852178][ T8507] bus_probe_device+0x12a/0x220 [ 895.857573][ T8507] device_add+0x7e9/0xbb0 [ 895.862432][ T8507] faux_device_create_with_groups+0x189/0x290 [ 895.869069][ T8507] regulator_dummy_init+0x19/0x40 [ 895.874671][ T8507] regulator_init+0xca/0x110 [ 895.879787][ T8507] do_one_initcall+0x250/0x870 [ 895.885072][ T8507] do_initcall_level+0x104/0x190 [ 895.890533][ T8507] do_initcalls+0x59/0xa0 [ 895.895383][ T8507] kernel_init_freeable+0x2a6/0x3e0 [ 895.901105][ T8507] kernel_init+0x1d/0x1d0 [ 895.905963][ T8507] ret_from_fork+0x514/0xb70 [ 895.911076][ T8507] ret_from_fork_asm+0x1a/0x30 [ 895.916365][ T8507] [ 895.916365][ T8507] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 895.924969][ T8507] __lock_acquire+0x15a5/0x2cf0 [ 895.930361][ T8507] lock_acquire+0x106/0x350 [ 895.935385][ T8507] down_read+0x47/0x2e0 [ 895.940067][ T8507] kernfs_remove+0x35/0x80 [ 895.945010][ T8507] __kobject_del+0xe1/0x330 [ 895.950072][ T8507] kobject_del+0x45/0x60 [ 895.954841][ T8507] cleanup_glue_dir+0x1a3/0x220 [ 895.960215][ T8507] device_del+0x780/0x8f0 [ 895.965061][ T8507] device_destroy+0xb2/0x1a0 [ 895.970175][ T8507] macvtap_device_event+0x226/0x400 [ 895.975954][ T8507] notifier_call_chain+0x1ad/0x3d0 [ 895.981595][ T8507] unregister_netdevice_many_notify+0x177f/0x20c0 [ 895.988585][ T8507] macvlan_device_event+0x7ec/0x890 [ 895.994395][ T8507] notifier_call_chain+0x1ad/0x3d0 [ 896.000031][ T8507] unregister_netdevice_many_notify+0x177f/0x20c0 [ 896.006973][ T8507] unregister_netdevice_queue+0x31f/0x360 [ 896.013216][ T8507] br_del_bridge+0xb6/0xf0 [ 896.018227][ T8507] br_ioctl_stub+0x746/0xd60 [ 896.023369][ T8507] sock_ioctl+0x523/0x7f0 [ 896.028222][ T8507] __se_sys_ioctl+0xfc/0x170 [ 896.033359][ T8507] do_syscall_64+0x174/0x580 [ 896.038479][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.044891][ T8507] [ 896.044891][ T8507] other info that might help us debug this: [ 896.044891][ T8507] [ 896.055116][ T8507] Chain exists of: [ 896.055116][ T8507] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 896.055116][ T8507] [ 896.068591][ T8507] Possible unsafe locking scenario: [ 896.068591][ T8507] [ 896.076079][ T8507] CPU0 CPU1 [ 896.081513][ T8507] ---- ---- [ 896.086918][ T8507] lock(gdp_mutex); [ 896.090917][ T8507] lock(cpuhp_state-up); [ 896.097772][ T8507] lock(gdp_mutex); [ 896.104193][ T8507] rlock(&root->kernfs_supers_rwsem); [ 896.109654][ T8507] [ 896.109654][ T8507] *** DEADLOCK *** [ 896.109654][ T8507] [ 896.117835][ T8507] 3 locks held by syz.2.16003/8507: [ 896.123036][ T8507] #0: ffffffff8fdaa980 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4fa/0x7f0 [ 896.132231][ T8507] #1: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 896.141287][ T8507] #2: ffffffff8f3901a0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 896.150614][ T8507] [ 896.150614][ T8507] stack backtrace: [ 896.156502][ T8507] CPU: 0 UID: 0 PID: 8507 Comm: syz.2.16003 Not tainted syzkaller #0 PREEMPT(full) [ 896.156522][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.156533][ T8507] Call Trace: [ 896.156542][ T8507] [ 896.156551][ T8507] dump_stack_lvl+0xe8/0x150 [ 896.156572][ T8507] print_circular_bug+0x2e1/0x300 [ 896.156596][ T8507] check_noncircular+0x12e/0x150 [ 896.156621][ T8507] __lock_acquire+0x15a5/0x2cf0 [ 896.156649][ T8507] ? kernfs_remove+0x35/0x80 [ 896.156672][ T8507] lock_acquire+0x106/0x350 [ 896.156689][ T8507] ? kernfs_remove+0x35/0x80 [ 896.156718][ T8507] down_read+0x47/0x2e0 [ 896.156739][ T8507] ? kernfs_remove+0x35/0x80 [ 896.156763][ T8507] kernfs_remove+0x35/0x80 [ 896.156786][ T8507] __kobject_del+0xe1/0x330 [ 896.156809][ T8507] kobject_del+0x45/0x60 [ 896.156829][ T8507] cleanup_glue_dir+0x1a3/0x220 [ 896.156847][ T8507] device_del+0x780/0x8f0 [ 896.156865][ T8507] ? __pfx_device_del+0x10/0x10 [ 896.156885][ T8507] device_destroy+0xb2/0x1a0 [ 896.156901][ T8507] ? __pfx_device_destroy+0x10/0x10 [ 896.156921][ T8507] ? kernfs_remove_by_name_ns+0x101/0x140 [ 896.156948][ T8507] macvtap_device_event+0x226/0x400 [ 896.156969][ T8507] ? __pfx_macvtap_device_event+0x10/0x10 [ 896.156987][ T8507] ? igmp_netdev_event+0x7c/0x750 [ 896.157085][ T8507] notifier_call_chain+0x1ad/0x3d0 [ 896.157110][ T8507] unregister_netdevice_many_notify+0x177f/0x20c0 [ 896.157141][ T8507] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 896.157167][ T8507] ? netdev_upper_dev_unlink+0x99/0xe0 [ 896.157182][ T8507] ? __pfx_netdev_upper_dev_unlink+0x10/0x10 [ 896.157200][ T8507] ? macvlan_dellink+0x3e2/0x470 [ 896.157245][ T8507] macvlan_device_event+0x7ec/0x890 [ 896.157264][ T8507] ? __pfx_macvlan_device_event+0x10/0x10 [ 896.157283][ T8507] ? igmp_netdev_event+0x7c/0x750 [ 896.157308][ T8507] notifier_call_chain+0x1ad/0x3d0 [ 896.157332][ T8507] unregister_netdevice_many_notify+0x177f/0x20c0 [ 896.157362][ T8507] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 896.157388][ T8507] ? call_rcu+0x644/0x890 [ 896.157407][ T8507] ? lockdep_hardirqs_on+0x7a/0x110 [ 896.157437][ T8507] unregister_netdevice_queue+0x31f/0x360 [ 896.157459][ T8507] ? kernfs_put+0x4ff/0x520 [ 896.157480][ T8507] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 896.157501][ T8507] ? sysfs_remove_group+0x236/0x2e0 [ 896.157524][ T8507] ? br_dev_delete+0xe2/0x110 [ 896.157549][ T8507] br_del_bridge+0xb6/0xf0 [ 896.157573][ T8507] br_ioctl_stub+0x746/0xd60 [ 896.157592][ T8507] ? do_vfs_ioctl+0x1166/0x1530 [ 896.157608][ T8507] ? __pfx_br_ioctl_stub+0x10/0x10 [ 896.157625][ T8507] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 896.157652][ T8507] ? map_update_elem+0x712/0x9d0 [ 896.157678][ T8507] ? sock_ioctl+0x4fa/0x7f0 [ 896.157702][ T8507] ? do_futex+0x333/0x420 [ 896.157739][ T8507] ? __pfx_br_ioctl_stub+0x10/0x10 [ 896.157754][ T8507] sock_ioctl+0x523/0x7f0 [ 896.157777][ T8507] ? __pfx_sock_ioctl+0x10/0x10 [ 896.157799][ T8507] ? __fget_files+0x2a/0x420 [ 896.157819][ T8507] ? __fget_files+0x3a0/0x420 [ 896.157839][ T8507] ? __fget_files+0x2a/0x420 [ 896.157860][ T8507] ? bpf_lsm_file_ioctl+0x9/0x20 [ 896.157885][ T8507] ? __pfx_sock_ioctl+0x10/0x10 [ 896.157906][ T8507] __se_sys_ioctl+0xfc/0x170 [ 896.157932][ T8507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.157950][ T8507] do_syscall_64+0x174/0x580 [ 896.157968][ T8507] ? trace_irq_disable+0x3b/0x140 [ 896.157992][ T8507] ? clear_bhb_loop+0x40/0x90 [ 896.158011][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.158028][ T8507] RIP: 0033:0x7efc5d39ce59 [ 896.158045][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.158060][ T8507] RSP: 002b:00007efc5e228028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 896.158078][ T8507] RAX: ffffffffffffffda RBX: 00007efc5d615fa0 RCX: 00007efc5d39ce59 [ 896.158090][ T8507] RDX: 0000200000000900 RSI: 00000000000089a1 RDI: 0000000000000006 [ 896.158102][ T8507] RBP: 00007efc5d432d6f R08: 0000000000000000 R09: 0000000000000000 [ 896.158112][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.158123][ T8507] R13: 00007efc5d616038 R14: 00007efc5d615fa0 R15: 00007ffd22507338 [ 896.158143][ T8507] [ 896.735193][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 897.624132][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 898.664041][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 899.713659][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 900.743957][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 901.783601][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 902.823633][T27508] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 903.863729][ T773] IPVS: rr: UDP 224.0.0.2:0 - no destination available