last executing test programs: 2.582043782s ago: executing program 2 (id=8990): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xfff) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, 0x8) 2.555861083s ago: executing program 4 (id=8991): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000003c0)={r2, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x4}, 0x8) 1.79404686s ago: executing program 0 (id=9003): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}], 0x2}, 0x3f}], 0x1, 0x60, 0x0) 1.715052797s ago: executing program 3 (id=9004): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdc03, {0x0, 0x0, 0x0, 0x0, 0x4200a, 0x10}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 1.678106275s ago: executing program 0 (id=9005): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 1.577008226s ago: executing program 3 (id=9006): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x40010121}, 0x38, 0x40) 1.576633925s ago: executing program 4 (id=9007): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0xfe0, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfd2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xfbe, 0x0, @opaque="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"}}}}}, 0x0) 1.532079649s ago: executing program 2 (id=9008): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) 1.404348129s ago: executing program 3 (id=9010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x3, 0x2, 0x9}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.345715069s ago: executing program 2 (id=9011): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) 1.2891367s ago: executing program 0 (id=9012): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x11a, 0x1, 0xce}}], 0x18}, 0x8000) 1.204794216s ago: executing program 2 (id=9014): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) 1.149678132s ago: executing program 0 (id=9016): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x33) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1.127098917s ago: executing program 3 (id=9017): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x667}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 996.84919ms ago: executing program 3 (id=9018): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 990.185614ms ago: executing program 0 (id=9019): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31087a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 868.637267ms ago: executing program 3 (id=9020): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 781.301906ms ago: executing program 1 (id=9021): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 673.788148ms ago: executing program 1 (id=9022): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000b80)="ac811a9659ed69cb3521fb8185e7a7e8e63a95fe948a11989267469bad1e8364daa79cdd5bd29b2b46dc1fde0477e88d2dc63f9a72d6dd1701e926007b65a68661fda1062b0383c54b952c655dac6b57b1fc85260d920738b3e303fe720390f5b56237f9d0d38b71ef23582333c442f54fa4a9c926b038c314bc301918266101abf7bba9ca1020c39f8eb97f0fa098727671c81bd3a06063d628fa470f73d615e0814688e3b47915d601e75e273434135288540ccccf8247e530851c545050b74b8935c6bec63f6c69259cc6ae830eafa613ab151c8d3110a6efc564d72d1d2fce650e1b029301dc2db505c4125e746e21e6e2a4deff21dbb0e47a936f61425b27a6076df20998a1e7dcd8b492f2ffda72158cca17a71b41e84f55aca59a21eac288ef319b5b534c1bf2eaf22b78c00e1036781f5f38c5c0a76cf6b790e28dd3bcdcd10ae6700f5053028c8cca71630b434eb430b0afcc34432d15675b7f0c219bc2d597e1694370040defd02f9f2ac0600ef34bd0ba9710fdd3d43dbc24b746", 0x180, 0x8001, 0x0, 0x0) recvmsg(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f00000022c0)=""/144, 0x90}], 0x2}, 0x40) 617.270414ms ago: executing program 4 (id=9023): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x400}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e2}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x2, 0x2, 0x0, {0xa29, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x800, 0xa79, 0x2}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x1, 0x0, 0x0, {0x1, 0xa, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x7, 0xa}}, @NL80211_ATTR_IE={0x7, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40808}, 0x4000) 603.620024ms ago: executing program 1 (id=9024): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) 509.253464ms ago: executing program 4 (id=9025): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) 508.304676ms ago: executing program 1 (id=9026): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 474.966252ms ago: executing program 4 (id=9027): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}}, 0x20000000) 372.082946ms ago: executing program 1 (id=9028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 262.421851ms ago: executing program 4 (id=9029): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) 178.650037ms ago: executing program 2 (id=9030): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x808000}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 36.276055ms ago: executing program 1 (id=9031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a320000000014000000110001"], 0x94}, 0x1, 0x0, 0x0, 0x40801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 2.257306ms ago: executing program 0 (id=9032): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000ac0)={0x3, 0x7}, 0x4) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x80) 0s ago: executing program 2 (id=9033): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): netlink: 32 bytes leftover after parsing attributes in process `syz.0.2216'. [ 196.115227][T10466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.438074][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2224'. [ 196.471296][T10481] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2225'. [ 196.537687][T10484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.699479][T10491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2229'. [ 196.929806][T10502] netlink: 'syz.2.2235': attribute type 23 has an invalid length. [ 197.372227][T10522] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2245'. [ 197.753377][T10537] netlink: 'syz.3.2253': attribute type 11 has an invalid length. [ 198.454672][T10572] netlink: 'syz.0.2270': attribute type 21 has an invalid length. [ 198.484051][T10572] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2270'. [ 198.543930][T10575] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2272'. [ 198.715461][T10583] netlink: 'syz.0.2276': attribute type 30 has an invalid length. [ 198.744961][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2277'. [ 198.846607][T10592] netlink: 'syz.1.2280': attribute type 1 has an invalid length. [ 198.855089][T10592] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2280'. [ 198.864762][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2280'. [ 199.130872][T10600] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.155946][T10602] openvswitch: netlink: IPv4 tun info is not correct [ 199.526677][T10620] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 199.633622][T10626] netlink: 'syz.2.2297': attribute type 11 has an invalid length. [ 200.196577][T10654] netlink: 'syz.0.2311': attribute type 4 has an invalid length. [ 200.501071][T10666] netlink: 'syz.4.2317': attribute type 6 has an invalid length. [ 200.569334][T10666] netlink: 'syz.4.2317': attribute type 5 has an invalid length. [ 200.804191][T10680] openvswitch: netlink: IPv4 tun info is not correct [ 201.152050][T10697] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 201.186816][T10697] netlink: 'syz.2.2332': attribute type 2 has an invalid length. [ 201.325319][T10703] netlink: 'syz.3.2336': attribute type 21 has an invalid length. [ 202.035621][T10735] __nla_validate_parse: 8 callbacks suppressed [ 202.035669][T10735] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2352'. [ 202.176300][T10742] netlink: 'syz.1.2355': attribute type 1 has an invalid length. [ 202.702093][T10766] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 203.055616][T10785] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2376'. [ 203.462535][T10803] netlink: 'syz.2.2385': attribute type 12 has an invalid length. [ 203.837849][T10818] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2392'. [ 204.158764][T10834] netlink: 'syz.0.2399': attribute type 29 has an invalid length. [ 204.183997][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2399'. [ 204.205024][T10833] : renamed from team_slave_1 [ 204.898518][T10868] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 205.001462][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2418'. [ 205.029940][T10872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2418'. [ 205.273375][T10886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.501800][T10897] ip6t_srh: unknown srh match flags 4000 [ 206.077879][T10925] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 206.228409][T10931] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 206.262543][T10931] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2448'. [ 206.280531][T10931] NCSI netlink: No device for ifindex 0 [ 206.290405][T10933] netlink: 'syz.0.2449': attribute type 2 has an invalid length. [ 206.555361][T10940] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 206.855695][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 206.861889][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 206.862041][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 206.867954][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 206.868036][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 207.192058][T10974] netlink: 'syz.3.2467': attribute type 1 has an invalid length. [ 207.224776][T10974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2467'. [ 207.555902][T10989] openvswitch: netlink: IP tunnel dst address not specified [ 207.571401][T10988] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 208.578049][T11036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.605195][T11036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.636917][T11036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.659458][T11036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.102598][T11057] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 209.133022][T11057] netlink: 'syz.4.2509': attribute type 1 has an invalid length. [ 209.162136][T11059] netlink: 'syz.0.2510': attribute type 1 has an invalid length. [ 209.363014][T11067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2514'. [ 210.038138][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.083063][ T691] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.097393][T11100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.133885][ T691] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.168603][ T691] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.212166][T11102] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 210.575568][T11115] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 211.397456][T11154] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.135606][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2594'. [ 213.226294][T11234] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2596'. [ 213.499677][T11246] netlink: 'syz.0.2601': attribute type 1 has an invalid length. [ 213.800034][T11260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.866514][T11263] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2610'. [ 213.985174][T11268] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 213.992875][T11268] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 214.942781][T11314] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 215.824099][T11355] x_tables: duplicate entry at hook 2 [ 216.273604][T11381] Cannot find map_set index 65533 as target [ 216.694244][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2676'. [ 217.338235][T11428] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2691'. [ 217.369391][T11428] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 218.075550][T11462] sock: sock_timestamping_bind_phc: sock not bind to device [ 218.232407][T11469] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 218.247718][T11470] : renamed from virt_wifi0 [ 218.281333][T11472] openvswitch: netlink: Multiple metadata blocks provided [ 219.130595][T11509] lo: entered promiscuous mode [ 219.141743][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2734'. [ 219.152275][T11509] netlink: 'syz.2.2731': attribute type 2 has an invalid length. [ 219.169050][T11512] openvswitch: netlink: Missing key (keys=40, expected=80) [ 219.178976][T11509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.237132][T11514] bridge0: port 3(gretap0) entered disabled state [ 219.354709][T11514] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.390823][T11514] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.931128][T11544] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2748'. [ 219.965697][T11548] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2750'. [ 220.740310][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2763'. [ 220.808133][T11584] netlink: 'syz.3.2768': attribute type 21 has an invalid length. [ 220.848655][T11584] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2768'. [ 220.888432][T11584] netlink: 'syz.3.2768': attribute type 5 has an invalid length. [ 220.916611][T11584] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2768'. [ 221.334453][T11604] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.2778'. [ 221.823359][T11630] netlink: 'syz.1.2791': attribute type 3 has an invalid length. [ 222.554058][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2808'. [ 222.653351][T11668] x_tables: unsorted underflow at hook 4 [ 222.765074][T11673] netlink: 'syz.0.2812': attribute type 3 has an invalid length. [ 222.849164][T11673] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2812'. [ 223.248672][T11694] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2823'. [ 223.305332][T11697] netlink: 'syz.3.2824': attribute type 9 has an invalid length. [ 223.655233][T11712] netlink: 'syz.1.2830': attribute type 1 has an invalid length. [ 224.066900][T11731] netlink: 'syz.1.2840': attribute type 21 has an invalid length. [ 224.661076][T11760] __nla_validate_parse: 3 callbacks suppressed [ 224.661099][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2854'. [ 224.853245][T11766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.054295][T11776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.062716][T11776] IPv6: NLM_F_CREATE should be set when creating new route [ 225.070118][T11776] IPv6: NLM_F_CREATE should be set when creating new route [ 225.373017][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'. [ 225.797015][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2880'. [ 226.683188][T11853] IPv6: NLM_F_REPLACE set, but no existing node found! [ 227.081802][T11868] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 227.106651][T11868] netlink: 'syz.3.2907': attribute type 11 has an invalid length. [ 227.126381][T11868] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2907'. [ 227.362961][T11884] netlink: 'syz.0.2915': attribute type 24 has an invalid length. [ 228.626719][T11941] netlink: 'syz.0.2943': attribute type 21 has an invalid length. [ 228.651390][T11941] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2943'. [ 228.677254][T11941] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2943'. [ 228.814889][T11949] netlink: 'syz.1.2946': attribute type 21 has an invalid length. [ 228.848011][T11949] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2946'. [ 228.945911][T11953] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 228.999604][T11956] ieee802154 phy0 wpan0: encryption failed: -90 [ 229.380312][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2960'. [ 229.394835][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2960'. [ 229.404196][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2960'. [ 229.491926][T11972] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 229.517502][T11972] bond4 (unregistering): Released all slaves [ 230.044743][T12004] netlink: 'syz.1.2973': attribute type 12 has an invalid length. [ 230.154974][T12004] bond1: option primary_reselect: invalid value (255) [ 230.174484][T12004] bond1 (unregistering): Released all slaves [ 230.395468][T12018] IPVS: sync thread started: state = MASTER, mcast_ifn = team0, syncid = 1, id = 0 [ 231.368068][T12047] bond0: entered promiscuous mode [ 231.379525][T12047] bond_slave_0: entered promiscuous mode [ 231.416258][T12047] bond_slave_1: entered promiscuous mode [ 231.592139][T12054] wg1: entered promiscuous mode [ 231.610279][T12054] wg1: entered allmulticast mode [ 231.867155][T12067] __nla_validate_parse: 1 callbacks suppressed [ 231.867177][T12067] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3004'. [ 231.909616][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 231.944665][T12069] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3003'. [ 233.096048][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3029'. [ 233.174669][T12125] netlink: 'syz.0.3029': attribute type 3 has an invalid length. [ 233.827720][T12157] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 234.165531][T12172] set match dimension is over the limit! [ 234.389674][T12184] netlink: 'syz.4.3057': attribute type 1 has an invalid length. [ 234.426991][T12187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3058'. [ 234.448997][T12188] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3059'. [ 234.624246][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3062'. [ 234.658679][T12198] netlink: 'syz.3.3064': attribute type 2 has an invalid length. [ 234.804201][T12201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3065'. [ 234.936181][T12208] xfrm1: entered allmulticast mode [ 235.416870][T12230] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3080'. [ 235.527737][T12236] netlink: 'syz.2.3083': attribute type 5 has an invalid length. [ 235.848813][T12248] netlink: 'syz.3.3089': attribute type 24 has an invalid length. [ 235.894480][T12252] netlink: 'syz.2.3093': attribute type 21 has an invalid length. [ 235.917002][T12252] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.728014][T12296] netlink: 'syz.1.3111': attribute type 10 has an invalid length. [ 236.741938][T12295] xt_bpf: check failed: parse error [ 236.751744][T12296] netlink: 396 bytes leftover after parsing attributes in process `syz.1.3111'. [ 236.905078][ T30] audit: type=1107 audit(1776441525.851:2): pid=12300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 236.989946][T12306] SET target dimension over the limit! [ 237.283757][T12299] C: renamed from lo (while UP) [ 237.303306][T12299] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 237.718465][T12329] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3125'. [ 237.805697][T12332] delete_channel: no stack [ 238.230206][T12348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3133'. [ 238.332262][T12358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.737708][T12374] netlink: 'syz.4.3144': attribute type 1 has an invalid length. [ 238.766405][T12374] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3144'. [ 238.826452][T12379] netlink: 'syz.3.3146': attribute type 1 has an invalid length. [ 239.056907][T12387] netlink: 'syz.4.3149': attribute type 5 has an invalid length. [ 239.102399][T12387] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3149'. [ 239.151539][T12394] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 239.195449][T12394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.427486][T12405] netlink: 'syz.1.3157': attribute type 1 has an invalid length. [ 239.459099][T12405] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3157'. [ 239.741002][T12422] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3164'. [ 239.907377][T12416] bond1: Unable to set down delay as MII monitoring is disabled [ 239.965420][T12416] bond1 (unregistering): Released all slaves [ 240.304822][T12436] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 240.364425][T12436] bond1 (unregistering): Released all slaves [ 241.013737][T12475] Unsupported ieee802154 address type: 0 [ 241.060326][T12479] openvswitch: netlink: Missing valid actions attribute. [ 241.090949][T12479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.274505][T12487] xt_TCPMSS: Only works on TCP SYN packets [ 241.914028][T12516] netlink: 'syz.4.3202': attribute type 3 has an invalid length. [ 241.953220][T12516] netlink: 'syz.4.3202': attribute type 1 has an invalid length. [ 242.624215][T12550] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.172866][T12617] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3245'. [ 244.857557][T12643] veth3: entered promiscuous mode [ 244.881560][T12643] veth3: entered allmulticast mode [ 245.229874][T12667] netlink: 'syz.4.3262': attribute type 2 has an invalid length. [ 245.524971][T12674] xt_CT: No such helper "snmp_trap" [ 246.707030][T12733] x_tables: duplicate entry at hook 3 [ 246.826220][T12741] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 247.446780][T12765] netlink: 'syz.4.3308': attribute type 64 has an invalid length. [ 247.754987][T12779] ipt_REJECT: TCP_RESET invalid for non-tcp [ 248.564952][T12818] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 248.714481][T12824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3337'. [ 248.942616][T12836] netlink: 'syz.1.3342': attribute type 1 has an invalid length. [ 249.637856][T12871] tipc: Can't bind to reserved service type 1 [ 249.888127][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3365'. [ 249.953538][T12886] nft_compat: unsupported protocol 0 [ 250.104962][T12892] netlink: 'syz.0.3370': attribute type 2 has an invalid length. [ 250.514391][T12911] vxcan1 speed is unknown, defaulting to 1000 [ 250.565820][T12911] vxcan1 speed is unknown, defaulting to 1000 [ 250.584825][T12915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3382'. [ 250.605054][T12911] vxcan1 speed is unknown, defaulting to 1000 [ 250.774712][T12921] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 250.858709][T12926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 250.873695][T12926] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 250.894837][T12927] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.3386'. [ 251.123872][T12935] netlink: 'syz.3.3392': attribute type 10 has an invalid length. [ 251.734676][ T5977] vxcan1 speed is unknown, defaulting to 1000 [ 251.746469][T12911] infiniband syz2: set active [ 251.784318][T12911] infiniband syz2: added vxcan1 [ 251.814096][T12911] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 251.818982][T12911] infiniband syz2: Couldn't open port 1 [ 251.979008][T12911] RDS/IB: syz2: added [ 252.001901][T12911] smc: adding ib device syz2 with port count 1 [ 252.019670][T12911] smc: ib device syz2 port 1 has no pnetid [ 252.042878][ T9] vxcan1 speed is unknown, defaulting to 1000 [ 252.076308][T12911] vxcan1 speed is unknown, defaulting to 1000 [ 252.998667][T12911] vxcan1 speed is unknown, defaulting to 1000 [ 253.481705][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3436'. [ 253.743612][T13035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.785364][T12911] vxcan1 speed is unknown, defaulting to 1000 [ 254.511918][T12911] vxcan1 speed is unknown, defaulting to 1000 [ 254.598583][T13066] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 254.884190][T13081] netlink: 'syz.3.3461': attribute type 1 has an invalid length. [ 254.896602][T13081] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3461'. [ 255.425025][T12911] vxcan1 speed is unknown, defaulting to 1000 [ 255.865316][T13120] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3481'. [ 255.993423][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.000054][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.950553][T13165] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3503'. [ 256.973018][T13167] netlink: zone id is out of range [ 256.989495][T13167] netlink: zone id is out of range [ 257.002071][T13167] netlink: zone id is out of range [ 257.014438][T13167] netlink: zone id is out of range [ 257.031175][T13167] netlink: zone id is out of range [ 257.048586][T13167] netlink: zone id is out of range [ 257.061697][T13167] netlink: zone id is out of range [ 257.075546][T13134] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 257.077164][T13167] netlink: set zone limit has 4 unknown bytes [ 257.286030][T13178] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3510'. [ 257.374723][T13183] Unsupported ieee802154 address type: 0 [ 257.929548][T13210] netlink: 'syz.1.3525': attribute type 2 has an invalid length. [ 258.094417][T13210] v: entered promiscuous mode [ 258.289384][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 258.357599][T13225] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 258.456264][T13229] netlink: 'syz.4.3535': attribute type 11 has an invalid length. [ 258.489989][T13229] netlink: 'syz.4.3535': attribute type 11 has an invalid length. [ 258.511028][T13232] lo: entered promiscuous mode [ 258.519449][T13229] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3535'. [ 258.555437][T13232] tunl0: entered promiscuous mode [ 258.571113][T13232] gre0: entered promiscuous mode [ 258.601834][T13232] gretap0: entered promiscuous mode [ 258.654223][T13232] erspan0: entered promiscuous mode [ 258.687386][T13232] ip_vti0: entered promiscuous mode [ 259.591178][T13279] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3558'. [ 260.379519][T13315] netlink: 'syz.0.3577': attribute type 2 has an invalid length. [ 260.411475][T13315] netlink: 'syz.0.3577': attribute type 2 has an invalid length. [ 260.624870][T13328] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3584'. [ 261.319162][T13361] netlink: 'syz.4.3601': attribute type 1 has an invalid length. [ 261.359674][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3601'. [ 261.382268][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3601'. [ 261.489142][T13362] bridge0: port 1(bridge_slave_0) entered learning state [ 261.497345][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'. [ 262.383544][T13408] netlink: 'syz.2.3623': attribute type 3 has an invalid length. [ 262.401983][T13408] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3623'. [ 262.673644][T13423] netlink: 'syz.0.3631': attribute type 1 has an invalid length. [ 262.802984][T13428] ipt_ECN: cannot use operation on non-tcp rule [ 263.152057][T13443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3641'. [ 263.169411][T13443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3641'. [ 263.208904][T13445] tc_dump_action: action bad kind [ 264.233981][T13497] openvswitch: netlink: Unknown key attributes 2 [ 264.853448][ T9] IPVS: starting estimator thread 0... [ 264.959363][T13530] IPVS: using max 28 ests per chain, 67200 per kthread [ 265.206869][T13535] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 265.283201][T13535] bond1 (unregistering): Released all slaves [ 265.701595][T13565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3701'. [ 265.739017][T13565] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3701'. [ 265.831882][T13565] gretap1: entered promiscuous mode [ 265.859414][T13565] gretap1: entered allmulticast mode [ 266.556457][T13607] netlink: 'syz.4.3722': attribute type 1 has an invalid length. [ 267.026090][T13625] netlink: 'syz.4.3730': attribute type 1 has an invalid length. [ 267.052283][T13625] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3730'. [ 267.072981][T13629] netlink: zone id is out of range [ 267.091190][T13629] netlink: zone id is out of range [ 267.109394][T13629] netlink: zone id is out of range [ 267.128906][T13629] netlink: zone id is out of range [ 267.140210][T13631] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.164160][T13629] netlink: zone id is out of range [ 267.179777][T13629] netlink: zone id is out of range [ 267.211748][T13629] netlink: zone id is out of range [ 267.229712][T13629] netlink: zone id is out of range [ 267.316929][T13637] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3735'. [ 267.590991][T13651] Cannot find del_set index 3 as target [ 267.746906][T13657] netlink: 'syz.2.3746': attribute type 29 has an invalid length. [ 267.773180][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 267.804928][T13659] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3747'. [ 268.047624][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3754'. [ 268.715288][T13702] netlink: 'syz.1.3768': attribute type 21 has an invalid length. [ 268.739174][T13702] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3768'. [ 269.486415][T13738] lo: left promiscuous mode [ 269.658652][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.666450][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.875612][T13751] netlink: 'syz.2.3792': attribute type 32 has an invalid length. [ 270.016805][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3795'. [ 270.151009][T13738] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 270.268651][T13738] ip6tnl1: left allmulticast mode [ 270.276895][T13738] geneve2: left promiscuous mode [ 270.286595][T13738] geneve2: left allmulticast mode [ 270.315270][T13738] bridge2: left promiscuous mode [ 270.326760][T13738] bridge2: left allmulticast mode [ 270.356321][T13738] gretap1: left promiscuous mode [ 270.366153][T13738] gretap1: left allmulticast mode [ 270.397841][ T29] vxcan1 speed is unknown, defaulting to 1000 [ 270.406729][ T1327] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.438754][ T29] syz2: Port: 1 Link DOWN [ 270.453223][ T1327] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.485381][ T5831] vxcan1 speed is unknown, defaulting to 1000 [ 270.491949][ T1327] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.527974][ T1327] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.910714][T13789] netlink: 'syz.3.3807': attribute type 11 has an invalid length. [ 270.930977][T13789] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3807'. [ 271.257091][T13800] xt_CT: No such helper "pptp" [ 271.396318][T13811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3818'. [ 271.451193][T13813] netlink: 'syz.1.3819': attribute type 4 has an invalid length. [ 271.474085][T13813] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3819'. [ 272.117967][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3832'. [ 272.180757][T13839] net_ratelimit: 4 callbacks suppressed [ 272.180776][T13839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.798294][T13867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3847'. [ 272.876995][T13874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.957749][T13878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3852'. [ 273.304420][T13892] netlink: zone id is out of range [ 273.319016][T13892] netlink: del zone limit has 4 unknown bytes [ 273.752424][T13914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3869'. [ 273.904324][T13916] netlink: set zone limit has 4 unknown bytes [ 274.267930][T13935] sctp: [Deprecated]: syz.4.3879 (pid 13935) Use of int in maxseg socket option. [ 274.267930][T13935] Use struct sctp_assoc_value instead [ 274.486298][T13946] ip6t_srh: unknown srh match flags 5F28 [ 274.683004][T13955] netlink: 'syz.4.3889': attribute type 1 has an invalid length. [ 274.722132][T13960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3892'. [ 275.282325][T13980] netlink: 'syz.4.3902': attribute type 24 has an invalid length. [ 275.701631][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'. [ 276.122018][T14022] x_tables: duplicate underflow at hook 2 [ 276.523138][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3932'. [ 276.560705][T14041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3932'. [ 276.890414][T14057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.162464][T14071] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3947'. [ 277.807241][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3964'. [ 277.993331][T14113] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3966'. [ 278.323160][T14127] netlink: 'syz.4.3975': attribute type 1 has an invalid length. [ 279.188085][T14171] netlink: 'syz.3.3996': attribute type 11 has an invalid length. [ 279.198101][T14172] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3998'. [ 279.239576][T14172] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3998'. [ 279.467485][T14181] delete_channel: no stack [ 280.028137][T14208] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4016'. [ 280.073896][T14208] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4016'. [ 280.110785][T14208] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4016'. [ 280.145413][T14215] netlink: 'syz.1.4019': attribute type 2 has an invalid length. [ 280.903037][T14247] openvswitch: netlink: IP tunnel dst address not specified [ 281.924023][T14293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4055'. [ 282.093804][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4058'. [ 282.513306][T14320] No such timeout policy "syz1" [ 282.562536][T14323] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 282.586990][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4069'. [ 282.910597][T14341] netlink: 'syz.3.4077': attribute type 16 has an invalid length. [ 282.930890][T14341] netlink: 'syz.3.4077': attribute type 17 has an invalid length. [ 282.968648][T14341] bridge0: port 3(gretap0) entered blocking state [ 282.975406][T14341] bridge0: port 3(gretap0) entered forwarding state [ 283.022371][T14341] bond0: left promiscuous mode [ 283.036942][T14341] bond_slave_0: left promiscuous mode [ 283.055862][T14341] bond_slave_1: left promiscuous mode [ 283.093166][T14341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.152683][T14341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.525772][T14364] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 283.792984][T14376] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4095'. [ 284.008616][T14386] openvswitch: netlink: IP tunnel TTL not specified. [ 284.221304][T14396] netlink: 'syz.3.4107': attribute type 1 has an invalid length. [ 284.405523][T14405] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4109'. [ 284.546359][T14410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.041832][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4124'. [ 285.080890][T14435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4124'. [ 285.093246][T14438] netlink: 'syz.2.4126': attribute type 11 has an invalid length. [ 285.120385][T14438] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4126'. [ 285.132291][T14435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4124'. [ 285.929930][T14480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4146'. [ 286.057825][T14485] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.146828][T14490] netlink: 'syz.1.4151': attribute type 11 has an invalid length. [ 286.175524][T14480] bond3: option xmit_hash_policy: invalid value (64) [ 286.197119][T14480] bond3 (unregistering): Released all slaves [ 286.597996][T14511] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 286.814649][T14519] netlink: 'syz.3.4167': attribute type 21 has an invalid length. [ 287.207574][T14539] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 287.257096][T14543] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 287.559096][T14555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.643096][T14557] __nla_validate_parse: 2 callbacks suppressed [ 287.643116][T14557] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4186'. [ 287.958114][T14573] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4192'. [ 288.086091][T14578] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4196'. [ 288.310593][T14591] Bluetooth: MGMT ver 1.23 [ 288.527483][T14600] netlink: 'syz.0.4207': attribute type 2 has an invalid length. [ 288.548932][T14600] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4207'. [ 288.781924][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4212'. [ 289.886842][T14664] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 290.174056][T14679] netlink: 'syz.2.4242': attribute type 4 has an invalid length. [ 290.206349][T14679] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4242'. [ 290.223992][T14683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4244'. [ 290.245305][T14679] .`: renamed from bond0 (while UP) [ 290.624495][T14697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4251'. [ 292.035401][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4278'. [ 292.349142][T14768] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4286'. [ 292.383233][T14768] nbd: illegal input index -8454144 [ 292.953492][T14795] rdma_op ffff8880697b39f0 conn xmit_rdma 0000000000000000 [ 293.011327][T14800] pim6reg: entered allmulticast mode [ 293.031162][T14800] pim6reg: left allmulticast mode [ 293.149791][T14806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4303'. [ 293.190974][T14806] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 293.197426][T14808] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4304'. [ 293.625748][T14826] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4313'. [ 293.934324][T14840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4320'. [ 294.551080][T14871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4334'. [ 295.064833][T14891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4345'. [ 295.095339][T14890] delete_channel: no stack [ 295.379157][T14908] xt_l2tp: wrong L2TP version: 0 [ 295.617866][T14920] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4358'. [ 296.618637][T14969] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4381'. [ 296.970960][T14980] IPVS: Scheduler module ip_vs_sip not found [ 297.454053][T15006] Bluetooth: MGMT ver 1.23 [ 297.460260][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4400'. [ 297.476351][T15009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.498226][T15008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4400'. [ 298.859129][T15079] __nla_validate_parse: 1 callbacks suppressed [ 298.859149][T15079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4431'. [ 299.068650][T15089] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4435'. [ 300.078331][ T30] audit: type=1107 audit(1776441589.021:3): pid=15136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 300.200541][T15140] vlan2: entered allmulticast mode [ 300.221171][T15140] bond0: entered allmulticast mode [ 300.244649][T15140] bond_slave_0: entered allmulticast mode [ 300.256607][T15140] bond_slave_1: entered allmulticast mode [ 301.097688][T15187] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4483'. [ 301.152557][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4485'. [ 301.188323][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4485'. [ 301.482305][T15207] netlink: 'syz.1.4491': attribute type 33 has an invalid length. [ 301.702904][T15217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4496'. [ 301.977932][T15231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4500'. [ 302.961986][T15281] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4522'. [ 303.069169][T15286] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4524'. [ 303.574054][T15310] netlink: 'syz.1.4535': attribute type 3 has an invalid length. [ 303.637188][T15314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.700815][T15418] netlink: 'syz.0.4583': attribute type 2 has an invalid length. [ 305.716684][T15416] syz.2.4582 (15416) used obsolete PPPIOCDETACH ioctl [ 306.011507][T15432] pimreg3: entered allmulticast mode [ 307.184325][T15479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4610'. [ 307.314057][T15479] bond1: Invalid ad_actor_system MAC address. [ 307.333294][T15479] bond1: option ad_actor_system: invalid value (1) [ 307.354376][T15479] bond1 (unregistering): Released all slaves [ 307.681690][T15500] netlink: 'syz.2.4619': attribute type 1 has an invalid length. [ 307.706708][T15500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4619'. [ 307.773579][T15500] netlink: 'syz.2.4619': attribute type 1 has an invalid length. [ 307.794141][T15500] netlink: 'syz.2.4619': attribute type 8 has an invalid length. [ 307.814974][T15500] netlink: 606 bytes leftover after parsing attributes in process `syz.2.4619'. [ 307.853591][T15500] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4619'. [ 308.268980][T15530] netlink: 'syz.1.4634': attribute type 1 has an invalid length. [ 308.486093][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4639'. [ 309.379146][T15589] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4661'. [ 309.760379][T15605] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4667'. [ 309.779714][T15605] netlink: 'syz.1.4667': attribute type 9 has an invalid length. [ 310.451380][T15639] netlink: 'syz.2.4684': attribute type 29 has an invalid length. [ 311.493125][T15685] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 312.702810][T15732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4726'. [ 313.074623][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4735'. [ 313.119398][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4735'. [ 313.151036][T15752] netlink: 'syz.0.4735': attribute type 12 has an invalid length. [ 313.181980][T15752] netlink: 'syz.0.4735': attribute type 11 has an invalid length. [ 313.995984][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4755'. [ 314.049140][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4755'. [ 314.746159][T15834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4772'. [ 314.798633][T15836] lo: left promiscuous mode [ 314.956234][T15836] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.964234][T15836] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.100378][T15836] wg1: left promiscuous mode [ 315.113134][T15836] wg1: left allmulticast mode [ 315.153166][T15836] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 315.609053][T15876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.877853][T15887] Zero length message leads to an empty skb [ 316.515423][T15914] netlink: 'syz.1.4812': attribute type 3 has an invalid length. [ 316.744989][T15927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4815'. [ 316.934662][T15935] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4820'. [ 317.140706][T15945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.418843][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.425431][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.559698][T15968] netlink: 'syz.2.4835': attribute type 1 has an invalid length. [ 317.649365][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 317.656777][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 319.230129][T16041] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4869'. [ 319.605814][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4879'. [ 319.638162][T16060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4879'. [ 319.964299][T16078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4888'. [ 320.177776][T16087] netlink: 'syz.3.4893': attribute type 25 has an invalid length. [ 320.251271][T16090] tipc: Enabling of bearer rejected, failed to enable media [ 320.488095][T16100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4900'. [ 320.667453][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4901'. [ 320.703797][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4901'. [ 321.627925][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4924'. [ 321.823973][T16153] "syz.1.4925" (16153) uses obsolete ecb(arc4) skcipher [ 322.173213][T16182] netlink: 'syz.3.4937': attribute type 1 has an invalid length. [ 322.202170][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4937'. [ 322.236824][T16182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4937'. [ 322.289073][T16182] netlink: 'syz.3.4937': attribute type 2 has an invalid length. [ 322.320232][T16182] netlink: 'syz.3.4937': attribute type 2 has an invalid length. [ 322.345424][T16182] netlink: 'syz.3.4937': attribute type 2 has an invalid length. [ 322.740194][T16205] netlink: 'syz.0.4948': attribute type 10 has an invalid length. [ 322.764598][T16205] netlink: 'syz.0.4948': attribute type 10 has an invalid length. [ 323.154505][T16222] tipc: Started in network mode [ 323.182545][T16222] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 323.207606][T16222] tipc: Enabled bearer , priority 24 [ 324.201723][ T5831] tipc: Node number set to 10005162 [ 324.804753][T16301] __nla_validate_parse: 1 callbacks suppressed [ 324.804775][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4993'. [ 324.828391][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4993'. [ 325.167577][T16317] netlink: 'syz.3.5001': attribute type 13 has an invalid length. [ 325.228520][T16317] veth0_macvtap: left promiscuous mode [ 325.285414][T16317] macvtap0: entered allmulticast mode [ 325.332760][T16317] macvtap0: refused to change device tx_queue_len [ 325.634704][T16338] netlink: 'syz.2.5012': attribute type 2 has an invalid length. [ 327.597171][T16429] netlink: 'syz.1.5056': attribute type 4 has an invalid length. [ 327.715982][T16435] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5059'. [ 328.105009][ T128] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.135666][ T128] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.157406][ T128] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.176260][ T128] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.231185][T16460] Bluetooth: MGMT ver 1.23 [ 328.394197][T16470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5077'. [ 328.688524][T16483] netlink: 'syz.3.5083': attribute type 1 has an invalid length. [ 329.326533][T16515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5098'. [ 329.404378][T16518] netlink: 'syz.4.5099': attribute type 1 has an invalid length. [ 329.438130][T16518] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5099'. [ 330.502763][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5122'. [ 330.522090][T16571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5123'. [ 330.961634][T16594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5135'. [ 331.528992][T16616] netlink: 'syz.4.5146': attribute type 2 has an invalid length. [ 331.656427][T16625] netlink: 'syz.3.5150': attribute type 2 has an invalid length. [ 331.775755][T16631] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5152'. [ 333.106120][T16686] smc: net device team0 applied user defined pnetid SYZ2 [ 333.235362][T16690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.463033][T16700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.717312][T16709] netlink: 'syz.4.5191': attribute type 23 has an invalid length. [ 335.979941][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5239'. [ 336.283352][T16819] netlink: 'syz.3.5244': attribute type 4 has an invalid length. [ 336.304409][T16819] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5244'. [ 336.646017][T16838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5252'. [ 336.669050][T16838] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5252'. [ 337.167575][T16859] tipc: Enabling of bearer rejected, failed to enable media [ 337.293045][T16864] xt_l2tp: invalid flags combination: 0 [ 337.354248][T16869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5267'. [ 337.806149][T16895] netlink: 'syz.4.5280': attribute type 3 has an invalid length. [ 338.033104][T16907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5286'. [ 338.364661][T16923] tipc: Enabling not permitted [ 338.382094][T16923] tipc: Enabling of bearer rejected, failed to enable media [ 338.700333][T16943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5303'. [ 339.242723][T16966] netlink: 'syz.1.5314': attribute type 11 has an invalid length. [ 339.275248][T16966] netlink: 199788 bytes leftover after parsing attributes in process `syz.1.5314'. [ 339.475772][T16978] vlan1: entered allmulticast mode [ 340.257523][T17018] xt_hashlimit: size too large, truncated to 1048576 [ 340.310506][T17020] : entered promiscuous mode [ 340.693149][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 341.314924][T17074] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5361'. [ 341.375771][T17081] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5363'. [ 341.472538][T17084] openvswitch: netlink: Missing valid actions attribute. [ 341.496165][T17084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.786874][T17102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.934983][ T5837] IPVS: starting estimator thread 0... [ 342.041918][T17111] IPVS: using max 26 ests per chain, 62400 per kthread [ 342.405637][T17138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5392'. [ 342.415038][T17138] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5392'. [ 342.424741][T17138] netlink: 'syz.2.5392': attribute type 5 has an invalid length. [ 342.938371][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5404'. [ 342.962159][T17167] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 342.962159][T17167] Please contact the netfilter-devel mailing list or update your nftables rules. [ 343.271232][ T5837] IPVS: starting estimator thread 0... [ 343.419433][T17181] IPVS: using max 28 ests per chain, 67200 per kthread [ 343.820344][T17210] bridge_slave_0: default FDB implementation only supports local addresses [ 344.763878][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5449'. [ 344.777625][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5449'. [ 344.801515][T17263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.310423][T17288] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5463'. [ 345.591900][T17302] netlink: 'syz.2.5471': attribute type 1 has an invalid length. [ 345.609565][T17302] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5471'. [ 345.622507][T17302] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5471'. [ 345.643599][T17302] netlink: 'syz.2.5471': attribute type 1 has an invalid length. [ 345.817261][T17311] xt_HMARK: spi-set and port-set can't be combined [ 346.490251][T17345] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 346.713255][T17356] __nla_validate_parse: 2 callbacks suppressed [ 346.713277][T17356] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5497'. [ 346.757073][T17356] netlink: 'syz.2.5497': attribute type 2 has an invalid length. [ 347.569373][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 347.569377][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 347.607515][T17399] netlink: zone id is out of range [ 347.612928][T17399] netlink: zone id is out of range [ 347.618259][T17399] netlink: zone id is out of range [ 347.625951][T17399] netlink: zone id is out of range [ 347.631644][T17399] netlink: zone id is out of range [ 347.637245][T17399] netlink: zone id is out of range [ 347.643120][T17399] netlink: zone id is out of range [ 347.648423][T17399] netlink: zone id is out of range [ 347.654796][T17399] netlink: zone id is out of range [ 347.661960][T17399] netlink: zone id is out of range [ 347.842013][T17405] netlink: 'syz.3.5521': attribute type 2 has an invalid length. [ 347.917893][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5522'. [ 347.973770][T17413] tipc: Enabled bearer , priority 14 [ 348.056618][T17415] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5526'. [ 349.009756][T17470] netlink: 'syz.4.5554': attribute type 3 has an invalid length. [ 349.162910][T17478] netlink: 252 bytes leftover after parsing attributes in process `syz.1.5557'. [ 349.701131][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5570'. [ 349.980615][T17522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5574'. [ 350.593642][T17557] nbd: must specify a device to reconfigure [ 352.581783][T17648] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 352.676392][T17652] nbd: must specify a size in bytes for the device [ 352.976342][T17669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5645'. [ 353.004056][T17669] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5645'. [ 353.013774][T17669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5645'. [ 354.048653][T17722] IPVS: Error connecting to the multicast addr [ 354.247789][T17731] netlink: 'syz.1.5675': attribute type 11 has an invalid length. [ 354.337973][T17733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5676'. [ 355.127572][T17781] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5698'. [ 355.147463][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5698'. [ 355.171537][T17781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5698'. [ 355.358151][T17791] tipc: Enabling of bearer rejected, failed to enable media [ 355.548474][T17802] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5708'. [ 355.823943][T17818] net_ratelimit: 46 callbacks suppressed [ 355.823964][T17818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.102343][T17836] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 357.700392][T17921] Cannot find add_set index 46338 as target [ 358.685737][T17972] IPVS: ip_vs_edit_dest(): server weight less than zero [ 358.808525][T17977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5794'. [ 359.151928][T17994] xt_policy: too many policy elements [ 359.300654][T18002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.603511][T18016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5812'. [ 359.886207][T18034] IPv6: NLM_F_CREATE should be specified when creating new route [ 360.063309][T18043] netlink: 'syz.2.5823': attribute type 1 has an invalid length. [ 360.099386][T18043] netlink: 'syz.2.5823': attribute type 1 has an invalid length. [ 360.937112][T18087] netlink: 'syz.4.5840': attribute type 1 has an invalid length. [ 361.292924][T18090] syz.2.5842 (18090) used greatest stack depth: 17312 bytes left [ 361.487683][T18117] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5851'. [ 362.487231][T18165] nbd: must specify an index to disconnect [ 363.055947][T18200] netlink: 'syz.0.5885': attribute type 7 has an invalid length. [ 363.714268][T18228] xt_l2tp: v2 tid > 0xffff: 1114244 [ 363.915285][T18211] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 364.254033][T18257] netlink: 'syz.0.5903': attribute type 83 has an invalid length. [ 365.254834][T18301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5920'. [ 365.859148][T18332] netlink: 'syz.4.5932': attribute type 29 has an invalid length. [ 366.088454][T18346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5938'. [ 366.547372][T18373] sctp: [Deprecated]: syz.1.5946 (pid 18373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.547372][T18373] Use struct sctp_sack_info instead [ 366.602629][T18377] sctp: [Deprecated]: syz.1.5946 (pid 18377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.602629][T18377] Use struct sctp_sack_info instead [ 366.646184][T18378] netlink: 'syz.3.5948': attribute type 3 has an invalid length. [ 367.337808][T18412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5961'. [ 367.658694][T18425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5967'. [ 368.709536][T18480] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 368.757249][T18483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5995'. [ 368.872672][T18485] team0: Device gtp0 is up. Set it down before adding it as a team port [ 369.908633][T18542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6021'. [ 369.965271][T18546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6023'. [ 370.779168][T18590] netlink: 'syz.1.6045': attribute type 62 has an invalid length. [ 370.846851][T18594] vlan1: entered promiscuous mode [ 371.187964][T18612] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6056'. [ 371.197318][T18612] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6056'. [ 371.206980][T18612] netlink: 'syz.1.6056': attribute type 5 has an invalid length. [ 371.215400][T18612] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6056'. [ 371.301871][T18620] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 371.332486][T18620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.665366][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6067'. [ 371.693482][T18638] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6067'. [ 371.715837][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6067'. [ 372.519971][T18684] netlink: 'syz.4.6090': attribute type 58 has an invalid length. [ 372.563933][T18684] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6090'. [ 372.623233][T18690] tipc: Enabled bearer , priority 0 [ 372.738614][T18696] netlink: 'syz.3.6094': attribute type 1 has an invalid length. [ 372.747060][T18696] netlink: 'syz.3.6094': attribute type 3 has an invalid length. [ 372.760209][T18696] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6094'. [ 372.774809][T18696] NCSI netlink: No device for ifindex 813332851 [ 372.977241][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6100'. [ 373.023339][T18704] bridge0: entered promiscuous mode [ 373.034166][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6103'. [ 373.043451][T18704] macsec1: entered promiscuous mode [ 373.048878][T18704] macsec1: entered allmulticast mode [ 373.071247][T18704] bridge0: entered allmulticast mode [ 373.092935][T18704] bridge0: port 4(macsec1) entered blocking state [ 373.106560][T18704] bridge0: port 4(macsec1) entered disabled state [ 373.124903][T18704] bridge0: left allmulticast mode [ 373.145630][T18704] bridge0: left promiscuous mode [ 373.303212][T18718] netlink: 'syz.0.6107': attribute type 1 has an invalid length. [ 373.814708][T18745] netlink: 'syz.4.6120': attribute type 11 has an invalid length. [ 375.081315][T18813] ipvlan2: entered promiscuous mode [ 375.903637][T18853] netlink: 'syz.4.6168': attribute type 1 has an invalid length. [ 376.719525][T18895] netlink: 'syz.1.6182': attribute type 58 has an invalid length. [ 376.751454][T18895] __nla_validate_parse: 9 callbacks suppressed [ 376.751474][T18895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6182'. [ 378.008430][T18962] macsec1: entered promiscuous mode [ 378.028962][T18962] batadv0: entered promiscuous mode [ 378.050005][T18962] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 378.075603][T18962] batadv0: left promiscuous mode [ 378.790149][T19003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6229'. [ 378.857584][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.864320][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.022266][T19014] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6233'. [ 379.777616][T19058] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6256'. [ 380.265792][T19081] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.6267'. [ 380.431876][T19085] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 381.048841][T19115] netlink: 'syz.1.6284': attribute type 8 has an invalid length. [ 381.085783][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6284'. [ 381.120207][T19115] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.129026][T19115] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.460449][T19137] veth0_to_bond: entered allmulticast mode [ 382.303064][T19178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6314'. [ 382.632982][T19196] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6323'. [ 382.806569][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6327'. [ 382.828469][T19206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6327'. [ 383.207074][T19227] bridge6: entered promiscuous mode [ 383.232272][T19227] bridge6: entered allmulticast mode [ 383.274642][T19227] team0: Port device bridge6 added [ 383.364652][T19234] vlan1: entered promiscuous mode [ 383.380440][T19234] bridge0: entered promiscuous mode [ 383.507409][T19241] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6346'. [ 384.117903][T19274] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 384.141594][T19274] team0: Device macvlan2 is already an upper device of the team interface [ 384.146404][T19276] netlink: 'syz.3.6363': attribute type 1 has an invalid length. [ 384.162736][T19276] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6363'. [ 384.173284][T19276] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6363'. [ 384.182713][T19276] netlink: 'syz.3.6363': attribute type 1 has an invalid length. [ 384.191285][T19276] netlink: 'syz.3.6363': attribute type 8 has an invalid length. [ 384.199568][T19276] netlink: 606 bytes leftover after parsing attributes in process `syz.3.6363'. [ 384.451721][T19287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6368'. [ 385.581053][T19343] netlink: 'syz.0.6395': attribute type 3 has an invalid length. [ 386.233004][T19379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6412'. [ 386.866707][T19412] netlink: 'syz.2.6427': attribute type 2 has an invalid length. [ 387.269416][T19431] bond0: (slave bond_slave_1): Device is not our slave [ 387.276639][T19431] bond0: option active_slave: invalid value (bond_slave_1) [ 387.306060][T19431] bond0 (unregistering): Released all slaves [ 387.538957][T19447] __nla_validate_parse: 3 callbacks suppressed [ 387.538978][T19447] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6443'. [ 387.854343][T19465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6453'. [ 387.889962][T19465] netlink: 'syz.0.6453': attribute type 5 has an invalid length. [ 387.934785][T19465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6453'. [ 388.639280][T19498] vxcan1 speed is unknown, defaulting to 1000 [ 388.646684][T19506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6471'. [ 388.676404][T19506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6471'. [ 389.036526][T19518] vcan0: tx address claim with dest, not broadcast [ 389.070050][T19520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6478'. [ 389.580667][T19536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6486'. [ 389.708305][T19544] netlink: 'syz.1.6489': attribute type 4 has an invalid length. [ 389.728099][T19544] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6489'. [ 390.034413][T19561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6498'. [ 390.313905][T19570] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 390.784179][T19588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6510'. [ 391.519567][T19631] sch_fq: defrate 0 ignored. [ 391.948777][ T30] audit: type=1804 audit(1776441680.891:4): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6539" name="/newroot/1375/cgroup.controllers" dev="tmpfs" ino=6897 res=1 errno=0 [ 392.031758][ T30] audit: type=1800 audit(1776441680.891:5): pid=19654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6539" name="cgroup.controllers" dev="tmpfs" ino=6897 res=0 errno=0 [ 392.605169][T19689] netlink: 'syz.0.6557': attribute type 6 has an invalid length. [ 392.808944][T19700] netlink: 'syz.1.6560': attribute type 4 has an invalid length. [ 393.345713][T19727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.381697][T19729] netlink: 'syz.1.6570': attribute type 8 has an invalid length. [ 393.393044][T19729] sch_fq: defrate 0 ignored. [ 393.874494][ T5487] veth0_macvtap: left promiscuous mode [ 393.927629][T19752] veth0_to_team: entered allmulticast mode [ 394.324698][T19774] __nla_validate_parse: 2 callbacks suppressed [ 394.324719][T19774] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6587'. [ 394.610563][T19787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6592'. [ 395.124973][T19808] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 396.109157][T19851] macvtap1: entered allmulticast mode [ 396.140626][T19851] veth0_macvtap: entered allmulticast mode [ 396.191228][T19857] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6621'. [ 396.206409][T19857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6621'. [ 396.412237][T19869] xt_hashlimit: size too large, truncated to 1048576 [ 396.534805][T19872] bridge_slave_0 (unregistering): left allmulticast mode [ 396.576587][T19872] bridge_slave_0 (unregistering): left promiscuous mode [ 396.607349][T19872] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.041713][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6639'. [ 397.077835][T19898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6640'. [ 397.102114][T19898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6640'. [ 397.119499][T19898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6640'. [ 397.655188][T19928] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6654'. [ 398.016254][T19949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6663'. [ 398.041528][T19949] bridge_slave_1: left allmulticast mode [ 398.057475][T19949] bridge_slave_1: left promiscuous mode [ 398.069623][T19949] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.093097][T19949] bridge_slave_0: left allmulticast mode [ 398.106527][T19949] bridge_slave_0: left promiscuous mode [ 398.122988][T19949] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.397088][T19997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6687'. [ 399.897778][T20024] team0: No ports can be present during mode change [ 400.086816][T20038] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 400.208429][T20042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6706'. [ 400.232925][T20044] netlink: 'syz.0.6707': attribute type 8 has an invalid length. [ 400.235688][T20042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6706'. [ 400.345576][T20046] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6709'. [ 400.365463][T20046] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.6709'. [ 400.407848][T20052] ip6gre0: Master is either lo or non-ether device [ 401.355086][T20098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6732'. [ 401.681715][T20113] netlink: 'syz.4.6739': attribute type 2 has an invalid length. [ 401.705587][T20115] netlink: 'syz.0.6740': attribute type 25 has an invalid length. [ 402.226914][T20142] netlink: 272 bytes leftover after parsing attributes in process `syz.0.6753'. [ 403.240015][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6773'. [ 403.272083][T20188] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6773'. [ 403.306775][T20188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6773'. [ 404.287387][T20244] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 404.357902][T20250] netlink: 'syz.1.6802': attribute type 2 has an invalid length. [ 404.740048][T20270] netlink: 'syz.0.6811': attribute type 33 has an invalid length. [ 404.926823][T20270] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 404.992294][T20270] bond4 (unregistering): Released all slaves [ 405.347571][T20300] h: entered promiscuous mode [ 405.397169][T20303] netlink: 'syz.3.6826': attribute type 4 has an invalid length. [ 405.475461][T20308] netlink: 'syz.1.6829': attribute type 3 has an invalid length. [ 405.617039][T20314] netlink: 'syz.4.6832': attribute type 4 has an invalid length. [ 405.905687][T20328] __nla_validate_parse: 3 callbacks suppressed [ 405.905710][T20328] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6839'. [ 406.681071][T20368] IPv6: NLM_F_CREATE should be specified when creating new route [ 406.757089][T20370] tun0: tun_chr_ioctl cmd 1074025675 [ 406.776236][T20370] tun0: persist disabled [ 409.150774][T20481] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6899'. [ 409.823319][T20516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6916'. [ 409.849375][T20516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6916'. [ 410.583654][T20559] netlink: 'syz.0.6935': attribute type 21 has an invalid length. [ 410.603623][T20559] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6935'. [ 410.623666][T20559] netlink: 'syz.0.6935': attribute type 4 has an invalid length. [ 410.658604][T20563] netlink: 'syz.0.6935': attribute type 21 has an invalid length. [ 410.678901][T20559] netlink: 'syz.0.6935': attribute type 5 has an invalid length. [ 410.702382][T20563] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6935'. [ 410.722146][T20559] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6935'. [ 410.742527][T20563] netlink: 'syz.0.6935': attribute type 4 has an invalid length. [ 410.775725][T20563] netlink: 'syz.0.6935': attribute type 5 has an invalid length. [ 410.809460][T20563] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6935'. [ 411.261131][T20596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6951'. [ 411.495321][T20608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6957'. [ 411.550313][T20608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6957'. [ 411.908407][T20630] netlink: 284 bytes leftover after parsing attributes in process `syz.2.6967'. [ 412.756213][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6975'. [ 414.183294][T20715] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7005'. [ 414.776634][T20751] netlink: 'syz.1.7021': attribute type 9 has an invalid length. [ 415.208196][T20765] netlink: 'syz.3.7026': attribute type 10 has an invalid length. [ 415.307277][T20765] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 415.334920][T20764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.649509][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7038'. [ 416.020325][T20810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7048'. [ 416.303495][T20827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7055'. [ 416.322350][T20825] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7054'. [ 416.539617][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7055'. [ 417.313589][T20863] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7070'. [ 417.510441][T20871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7072'. [ 418.050257][T20892] netlink: 'syz.1.7082': attribute type 29 has an invalid length. [ 418.081069][T20892] netlink: 'syz.1.7082': attribute type 29 has an invalid length. [ 418.130789][T20892] netlink: 'syz.1.7082': attribute type 29 has an invalid length. [ 418.150144][T20892] netlink: 'syz.1.7082': attribute type 29 has an invalid length. [ 418.167744][T20892] netlink: 'syz.1.7082': attribute type 29 has an invalid length. [ 418.176716][T20892] netlink: 'syz.1.7082': attribute type 29 has an invalid length. [ 418.185883][T20892] netlink: 'syz.1.7082': attribute type 29 has an invalid length. [ 419.136428][T20949] netlink: 'syz.2.7110': attribute type 28 has an invalid length. [ 419.159704][T20949] netlink: 'syz.2.7110': attribute type 3 has an invalid length. [ 419.181032][T20949] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7110'. [ 419.388883][T20961] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7115'. [ 419.579553][T20970] sctp: [Deprecated]: syz.0.7120 (pid 20970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.579553][T20970] Use struct sctp_sack_info instead [ 420.042455][T20997] netlink: 'syz.4.7131': attribute type 1 has an invalid length. [ 420.066369][T20997] netlink: 184 bytes leftover after parsing attributes in process `syz.4.7131'. [ 420.090498][T20997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7131'. [ 420.342417][T21007] ip6erspan2: entered allmulticast mode [ 420.733676][T21032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7148'. [ 421.032292][T21042] veth0: entered promiscuous mode [ 421.038321][T21041] veth0: left promiscuous mode [ 421.910369][T21089] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7176'. [ 423.113492][T21156] validate_nla: 1 callbacks suppressed [ 423.113513][T21156] netlink: 'syz.3.7207': attribute type 1 has an invalid length. [ 423.174816][T21156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7207'. [ 423.389011][T21171] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.7214'. [ 423.427761][T21171] openvswitch: netlink: Message has 5 unknown bytes. [ 423.474289][T21175] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7216'. [ 423.497857][T21175] erspan0: entered promiscuous mode [ 423.949790][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7227'. [ 424.195820][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7232'. [ 424.228339][T21210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7232'. [ 424.313604][T21216] netem: incorrect gi model size [ 424.327444][T21216] netem: change failed [ 424.794604][T21239] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7246'. [ 424.998780][T21253] netlink: 'syz.4.7252': attribute type 5 has an invalid length. [ 425.159108][T21260] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7260'. [ 425.502635][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7266'. [ 427.435942][T21374] sctp: [Deprecated]: syz.0.7313 (pid 21374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.435942][T21374] Use struct sctp_sack_info instead [ 427.726997][T21392] tap0: tun_chr_ioctl cmd 1074025678 [ 427.749888][T21392] tap0: group set to 0 [ 427.818710][T21394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7323'. [ 428.378543][T21418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7334'. [ 428.401637][T21398] nbd0: detected capacity change from 0 to 63 [ 428.408257][T21418] macvtap0: Device is already in use. [ 428.456314][ T5830] block nbd0: Receive control failed (result -32) [ 428.472371][ T5836] block nbd0: Receive control failed (result -32) [ 428.504013][ T5969] block nbd0: Send control failed (result -32) [ 428.548320][ T5969] block nbd0: Request send failed, requeueing [ 428.644226][ T1719] block nbd0: Dead connection, failed to find a fallback [ 428.655025][ T1719] block nbd0: shutting down sockets [ 428.661534][ T1719] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.673565][ T1719] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.695187][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.710138][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read [ 428.719810][ T5969] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.729034][ T5969] Buffer I/O error on dev nbd0, logical block 2, async page read [ 428.738043][ T5969] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.747273][ T5969] Buffer I/O error on dev nbd0, logical block 3, async page read [ 428.755415][ T5969] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.764604][ T5969] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.774230][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.783465][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read [ 428.799326][ T5969] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.808943][ T5969] Buffer I/O error on dev nbd0, logical block 2, async page read [ 428.817604][ T5969] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.827219][ T5969] Buffer I/O error on dev nbd0, logical block 3, async page read [ 428.835655][ T5969] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.853534][ T5969] Buffer I/O error on dev nbd0, logical block 0, async page read [ 428.873025][ T5969] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 428.901329][ T5969] Buffer I/O error on dev nbd0, logical block 1, async page read [ 428.951592][ T5969] ldm_validate_partition_table(): Disk read failed. [ 429.004346][ T5969] Dev nbd0: unable to read RDB block 0 [ 429.036305][ T5969] nbd0: unable to read partition table [ 429.095224][ T5969] ldm_validate_partition_table(): Disk read failed. [ 429.114147][ T5969] Dev nbd0: unable to read RDB block 0 [ 429.134749][ T5969] nbd0: unable to read partition table [ 430.379573][T21513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7381'. [ 430.599448][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7382'. [ 430.732395][T21527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7387'. [ 431.294129][T21555] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 431.320572][T21555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.735392][T21574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7407'. [ 431.927610][T21584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7412'. [ 432.036784][T21590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7414'. [ 432.091626][T21593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7414'. [ 432.314217][T21606] tipc: Started in network mode [ 432.319483][T21606] tipc: Node identity ac14140f, cluster identity 4711 [ 432.327202][T21606] tipc: New replicast peer: 255.255.255.255 [ 432.335699][T21606] tipc: Enabled bearer , priority 10 [ 432.476371][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7426'. [ 432.823932][T21630] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7434'. [ 433.459549][T18248] tipc: Node number set to 2886997007 [ 436.617111][T21684] syz.0.7461 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 436.744730][T21684] CPU: 1 UID: 0 PID: 21684 Comm: syz.0.7461 Not tainted syzkaller #0 PREEMPT(full) [ 436.744760][T21684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 436.744781][T21684] Call Trace: [ 436.744789][T21684] [ 436.744799][T21684] dump_stack_lvl+0xe8/0x150 [ 436.744837][T21684] dump_header+0xd3/0x4c0 [ 436.744867][T21684] oom_kill_process+0x3ab/0x970 [ 436.744905][T21684] out_of_memory+0x106c/0x1410 [ 436.744934][T21684] ? try_charge_memcg+0xba6/0x1560 [ 436.744971][T21684] ? __pfx___mutex_lock+0x10/0x10 [ 436.745007][T21684] ? __pfx_out_of_memory+0x10/0x10 [ 436.745036][T21684] ? do_raw_spin_unlock+0xf5/0x210 [ 436.745072][T21684] try_charge_memcg+0xc53/0x1560 [ 436.745129][T21684] ? __pfx_try_charge_memcg+0x10/0x10 [ 436.745170][T21684] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 436.745207][T21684] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 436.745246][T21684] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 436.745285][T21684] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 436.745324][T21684] __swap_cache_prepare_and_add+0xe8/0x760 [ 436.745360][T21684] ? page_rmappable_folio+0x9a/0x170 [ 436.745394][T21684] swap_cache_alloc_folio+0xf1/0x240 [ 436.745427][T21684] swap_cluster_readahead+0x369/0x690 [ 436.745472][T21684] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 436.745518][T21684] ? get_vma_policy+0x27b/0x3c0 [ 436.745544][T21684] swapin_readahead+0x196/0xc50 [ 436.745578][T21684] ? swap_table_get+0x1e/0x260 [ 436.745611][T21684] ? __pfx_swapin_readahead+0x10/0x10 [ 436.745642][T21684] ? swap_table_get+0x1e/0x260 [ 436.745668][T21684] ? swap_table_get+0x1e/0x260 [ 436.745690][T21684] ? swap_table_get+0x1e/0x260 [ 436.745718][T21684] ? swap_table_get+0x216/0x260 [ 436.745745][T21684] ? swap_cache_get_folio+0x513/0x520 [ 436.745780][T21684] do_swap_page+0x56f/0x5a20 [ 436.745833][T21684] ? do_swap_page+0x127/0x5a20 [ 436.745857][T21684] ? __pfx_do_swap_page+0x10/0x10 [ 436.745881][T21684] ? __pte_offset_map+0x1ae/0x240 [ 436.745913][T21684] ? pte_offset_map_rw_nolock+0xea/0x160 [ 436.745946][T21684] handle_mm_fault+0x12d2/0x3310 [ 436.745991][T21684] ? handle_mm_fault+0xee/0x3310 [ 436.746029][T21684] ? __pfx_handle_mm_fault+0x10/0x10 [ 436.746053][T21684] ? lock_vma_under_rcu+0x45a/0x500 [ 436.746101][T21684] ? task_work_run+0x21f/0x270 [ 436.746139][T21684] do_user_addr_fault+0xa73/0x1340 [ 436.746183][T21684] ? rcu_is_watching+0x15/0xb0 [ 436.746215][T21684] ? trace_page_fault_user+0x84/0x1e0 [ 436.746249][T21684] exc_page_fault+0x6a/0xc0 [ 436.746277][T21684] asm_exc_page_fault+0x26/0x30 [ 436.746304][T21684] RIP: 0033:0x7f7e92b9c821 [ 436.746330][T21684] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 436.746350][T21684] RSP: 002b:00007ffcc23fc098 EFLAGS: 00010217 [ 436.746377][T21684] RAX: 0000000000000000 RBX: 00007f7e92e17da0 RCX: 00007f7e92b9c819 [ 436.746393][T21684] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 436.746405][T21684] RBP: 00007f7e92e17da0 R08: 0000000000000006 R09: 0000000000000000 [ 436.746418][T21684] R10: 00007f7e92e17cb0 R11: 0000000000000246 R12: 000000000006a1e5 [ 436.746432][T21684] R13: 00007f7e92e1609c R14: 0000000000069f26 R15: 00007ffcc23fc1a0 [ 436.746476][T21684] [ 437.071796][T21684] memory: usage 307200kB, limit 307200kB, failcnt 558 [ 437.081798][T21684] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 437.092608][T21684] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 437.100053][T21684] Memory cgroup stats for /syz0: [ 437.100513][T21684] cache 0 [ 437.108881][T21684] rss 0 [ 437.111736][T21684] rss_huge 0 [ 437.114964][T21684] shmem 0 [ 437.117931][T21684] mapped_file 0 [ 437.121490][T21684] dirty 0 [ 437.124457][T21684] writeback 0 [ 437.127795][T21684] workingset_refault_anon 6 [ 437.132399][T21684] workingset_refault_file 0 [ 437.137327][T21684] swap 176128 [ 437.140753][T21684] swapcached 225280 [ 437.144595][T21684] pgpgin 62345 [ 437.148027][T21684] pgpgout 62339 [ 437.151563][T21684] pgfault 166985 [ 437.155139][T21684] pgmajfault 3 [ 437.158577][T21684] inactive_anon 0 [ 437.162764][T21684] active_anon 24576 [ 437.166613][T21684] inactive_file 0 [ 437.170442][T21684] active_file 0 [ 437.173937][T21684] unevictable 0 [ 437.177428][T21684] hierarchical_memory_limit 314572800 [ 437.183012][T21684] hierarchical_memsw_limit 9223372036854771712 [ 437.189341][T21684] total_cache 0 [ 437.192842][T21684] total_rss 0 [ 437.196165][T21684] total_rss_huge 0 [ 437.200075][T21684] total_shmem 0 [ 437.203598][T21684] total_mapped_file 0 [ 437.208087][T21684] total_dirty 0 [ 437.211632][T21684] total_writeback 0 [ 437.215468][T21684] total_workingset_refault_anon 6 [ 437.220597][T21684] total_workingset_refault_file 0 [ 437.225658][T21684] total_swap 176128 [ 437.229533][T21684] total_swapcached 225280 [ 437.233909][T21684] total_pgpgin 62345 [ 437.237843][T21684] total_pgpgout 62339 [ 437.241916][T21684] total_pgfault 166985 [ 437.246029][T21684] total_pgmajfault 3 [ 437.250249][T21684] total_inactive_anon 0 [ 437.254472][T21684] total_active_anon 24576 [ 437.258844][T21684] total_inactive_file 0 [ 437.263101][T21684] total_active_file 0 [ 437.267116][T21684] total_unevictable 0 [ 437.271201][T21684] anon_cost 0 [ 437.274523][T21684] file_cost 0 [ 437.277855][T21684] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.7461,pid=21684,uid=0 [ 437.294545][T21684] Memory cgroup out of memory: Killed process 21684 (syz.0.7461) total-vm:102288kB, anon-rss:1236kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 438.696977][T21842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7525'. [ 438.759850][T21842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7525'. [ 438.822328][T21847] netlink: 'syz.0.7528': attribute type 2 has an invalid length. [ 438.863569][T21847] netlink: 'syz.0.7528': attribute type 2 has an invalid length. [ 439.325983][T21868] netlink: 'syz.4.7537': attribute type 83 has an invalid length. [ 439.881546][T21891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7547'. [ 440.236580][T21902] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7552'. [ 440.295066][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.301659][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.834153][T21928] netlink: 'syz.3.7566': attribute type 1 has an invalid length. [ 440.852720][T21928] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7566'. [ 440.873981][T21928] netlink: 'syz.3.7566': attribute type 1 has an invalid length. [ 440.893120][T21928] netlink: 'syz.3.7566': attribute type 8 has an invalid length. [ 440.912721][T21928] netlink: 582 bytes leftover after parsing attributes in process `syz.3.7566'. [ 440.939016][T21928] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7566'. [ 441.177520][T21938] veth1_macvtap: left promiscuous mode [ 441.427586][T21947] netlink: 'syz.0.7575': attribute type 4 has an invalid length. [ 441.495916][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7577'. [ 441.660437][T21957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7581'. [ 441.688160][T21957] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7581'. [ 442.711906][T22007] bridge0: port 3(gretap0) entered disabled state [ 443.019126][T22024] TCP: TCP_TX_DELAY enabled [ 443.037021][T22021] IPVS: persistence engine module ip_vs_pe_ not found [ 444.430971][T22096] __nla_validate_parse: 1 callbacks suppressed [ 444.430993][T22096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7646'. [ 445.152319][T22132] netlink: 'syz.3.7664': attribute type 1 has an invalid length. [ 445.172818][T22132] netlink: 'syz.3.7664': attribute type 3 has an invalid length. [ 445.219719][T22135] netlink: 'syz.2.7665': attribute type 3 has an invalid length. [ 445.228962][T22135] netlink: 'syz.2.7665': attribute type 3 has an invalid length. [ 445.233995][T22132] netlink: 'syz.3.7664': attribute type 7 has an invalid length. [ 445.261743][T22132] netlink: 'syz.3.7664': attribute type 8 has an invalid length. [ 445.276504][T22140] netlink: 81 bytes leftover after parsing attributes in process `syz.4.7668'. [ 445.286069][T22132] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7664'. [ 445.300844][T22132] NCSI netlink: No device for ifindex 131092 [ 445.315164][T22139] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7667'. [ 445.327339][T22135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7665'. [ 446.164669][T22183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7687'. [ 446.226369][T22183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7687'. [ 447.388641][T22252] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.7721'. [ 447.452888][T22258] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7719'. [ 447.472680][T22249] bond2: entered promiscuous mode [ 447.517868][T22259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7720'. [ 449.143631][T22342] netlink: 'syz.4.7760': attribute type 83 has an invalid length. [ 449.164732][T22326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.218250][T22326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.331977][T22326] macvtap0: left allmulticast mode [ 449.460693][T22326] veth3: left promiscuous mode [ 449.477300][T22326] xfrm1: left allmulticast mode [ 449.553252][T22326] bridge6: left promiscuous mode [ 449.558571][T22326] bridge6: left allmulticast mode [ 449.619113][T22330] geneve2: entered promiscuous mode [ 449.636951][ T13] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.652834][ T13] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.683415][ T13] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.700898][ T13] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.201864][T22392] __nla_validate_parse: 9 callbacks suppressed [ 450.201886][T22392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7777'. [ 450.223518][T22392] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7777'. [ 450.394221][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7781'. [ 450.751493][T22421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7790'. [ 450.780347][T22423] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7791'. [ 451.967224][T22485] tap0: tun_chr_ioctl cmd 1074025672 [ 451.982022][T22485] tap0: ignored: set checksum disabled [ 452.165937][T22494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7823'. [ 452.609585][T22516] nbd1: detected capacity change from 0 to 127 [ 452.631891][ T5836] block nbd1: Receive control failed (result -32) [ 452.667555][ T5969] block nbd1: Dead connection, failed to find a fallback [ 452.689930][ T5969] block nbd1: shutting down sockets [ 452.700082][ T5969] blk_print_req_error: 138 callbacks suppressed [ 452.700104][ T5969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.715743][ T5969] buffer_io_error: 138 callbacks suppressed [ 452.715764][ T5969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 452.730707][ T5969] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.739941][ T5969] Buffer I/O error on dev nbd1, logical block 1, async page read [ 452.748018][ T5969] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.759296][ T5969] Buffer I/O error on dev nbd1, logical block 2, async page read [ 452.767368][ T5969] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.777111][ T5969] Buffer I/O error on dev nbd1, logical block 3, async page read [ 452.830249][ T5969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.850885][ T5969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 452.860611][T22528] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.7838'. [ 452.873172][ T5969] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.890229][ T5969] Buffer I/O error on dev nbd1, logical block 1, async page read [ 452.907826][ T5969] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 452.932642][ T5969] Buffer I/O error on dev nbd1, logical block 2, async page read [ 452.966857][ T5969] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.005217][ T5969] Buffer I/O error on dev nbd1, logical block 3, async page read [ 453.033502][ T5969] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.051433][ T5969] Buffer I/O error on dev nbd1, logical block 0, async page read [ 453.062007][ T5969] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 453.073878][ T5969] Buffer I/O error on dev nbd1, logical block 1, async page read [ 453.137837][ T5969] ldm_validate_partition_table(): Disk read failed. [ 453.147033][ T5969] Dev nbd1: unable to read RDB block 0 [ 453.157589][ T5969] nbd1: unable to read partition table [ 453.172186][ T5969] ldm_validate_partition_table(): Disk read failed. [ 453.182579][ T5969] Dev nbd1: unable to read RDB block 0 [ 453.192395][ T5969] nbd1: unable to read partition table [ 453.593567][T22560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7849'. [ 454.030782][T22582] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 454.288675][T22595] block nbd2: Unsupported socket: should be TCP or UNIX. [ 454.589909][ T5836] block nbd2: Receive control failed (result -32) [ 454.730208][T22617] netlink: 88 bytes leftover after parsing attributes in process `syz.0.7874'. [ 454.766512][T22617] netem: invalid attributes len -24 [ 454.789935][T22617] netem: change failed [ 454.842154][T22624] netlink: 'syz.2.7879': attribute type 1 has an invalid length. [ 454.859462][T22624] netlink: 'syz.2.7879': attribute type 7 has an invalid length. [ 454.877538][T22624] netlink: 'syz.2.7879': attribute type 8 has an invalid length. [ 454.893826][T22624] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7879'. [ 455.258039][T22645] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7888'. [ 455.685485][T22666] : renamed from bond0 [ 455.710300][T22669] sctp: [Deprecated]: syz.0.7900 (pid 22669) Use of int in max_burst socket option deprecated. [ 455.710300][T22669] Use struct sctp_assoc_value instead [ 456.735318][T22715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7918'. [ 456.768548][T22715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7918'. [ 457.236391][T22737] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7926'. [ 457.265866][T22737] netlink: 'syz.2.7926': attribute type 1 has an invalid length. [ 457.655347][T22762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7937'. [ 457.671631][T22763] netlink: 766 bytes leftover after parsing attributes in process `syz.0.7938'. [ 457.973264][T22779] netlink: 'syz.2.7945': attribute type 10 has an invalid length. [ 458.015451][T22779] veth0_vlan: left promiscuous mode [ 458.040980][T22779] veth0_vlan: entered promiscuous mode [ 458.073200][T22779] team0: Device veth0_vlan failed to register rx_handler [ 458.265867][T22790] ipvlan0: entered allmulticast mode [ 458.271960][T22790] batadv_slave_1: entered allmulticast mode [ 458.305791][T22790] batman_adv: batadv0: Adding interface: ipvlan0 [ 458.328878][T22790] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.365759][T22790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.376765][T22790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.387727][T22790] batman_adv: batadv0: Interface activated: ipvlan0 [ 458.583310][T22803] tap1: tun_chr_ioctl cmd 2148553947 [ 458.919359][T22822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7966'. [ 459.360262][T22842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7975'. [ 459.525934][T22849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7979'. [ 459.549652][T22849] netlink: 'syz.3.7979': attribute type 30 has an invalid length. [ 459.576933][T22853] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7981'. [ 460.373476][ T5836] block nbd3: Receive control failed (result -32) [ 461.222817][T22946] __nla_validate_parse: 4 callbacks suppressed [ 461.222842][T22946] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.8023'. [ 461.500784][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8029'. [ 461.918321][T22980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8038'. [ 462.564023][T23016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8054'. [ 462.717433][T23021] netlink: 54 bytes leftover after parsing attributes in process `syz.4.8058'. [ 462.727256][T23021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8058'. [ 463.618459][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8080'. [ 464.372538][T23112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8098'. [ 464.536568][T23112] macvtap1: entered promiscuous mode [ 464.549633][T23112] vlan0: entered promiscuous mode [ 464.561843][T23112] macvtap1: entered allmulticast mode [ 464.577655][T23112] vlan0: entered allmulticast mode [ 464.590693][T23112] veth0_vlan: entered allmulticast mode [ 466.226330][T23196] gtp0: entered promiscuous mode [ 466.249340][T23196] gtp0: entered allmulticast mode [ 466.645710][T23222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8147'. [ 466.915838][T23236] netlink: 'syz.2.8154': attribute type 5 has an invalid length. [ 467.091443][T23243] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8156'. [ 467.471888][T23266] netlink: 'syz.4.8165': attribute type 1 has an invalid length. [ 467.488340][T23266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8165'. [ 468.041976][T23286] sctp: [Deprecated]: syz.4.8172 (pid 23286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.041976][T23286] Use struct sctp_sack_info instead [ 468.195119][T23293] syz.3.8175: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 468.242818][T23293] CPU: 1 UID: 0 PID: 23293 Comm: syz.3.8175 Not tainted syzkaller #0 PREEMPT(full) [ 468.242851][T23293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 468.242866][T23293] Call Trace: [ 468.242874][T23293] [ 468.242885][T23293] dump_stack_lvl+0xe8/0x150 [ 468.242927][T23293] warn_alloc+0x249/0x340 [ 468.242965][T23293] ? stack_trace_save+0xa9/0x100 [ 468.242995][T23293] ? __pfx_warn_alloc+0x10/0x10 [ 468.243038][T23293] ? kasan_save_track+0x4f/0x80 [ 468.243070][T23293] ? kasan_save_track+0x3e/0x80 [ 468.243100][T23293] ? __kasan_kmalloc+0x93/0xb0 [ 468.243119][T23293] ? __kmalloc_cache_noprof+0x31c/0x660 [ 468.243151][T23293] ? xskq_create+0x56/0x170 [ 468.243174][T23293] ? xsk_setsockopt+0x54c/0x990 [ 468.243193][T23293] ? do_sock_setsockopt+0x17c/0x1b0 [ 468.243224][T23293] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 468.243255][T23293] ? do_syscall_64+0x15f/0xf80 [ 468.243287][T23293] __vmalloc_node_range_noprof+0x132/0x1730 [ 468.243360][T23293] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 468.243407][T23293] ? __kasan_kmalloc+0x93/0xb0 [ 468.243434][T23293] vmalloc_user_noprof+0xad/0xe0 [ 468.243469][T23293] ? xskq_create+0xbf/0x170 [ 468.243493][T23293] xskq_create+0xbf/0x170 [ 468.243538][T23293] xsk_init_queue+0x8a/0xe0 [ 468.243564][T23293] xsk_setsockopt+0x54c/0x990 [ 468.243589][T23293] ? __pfx_xsk_setsockopt+0x10/0x10 [ 468.243612][T23293] ? __pfx_aa_sk_perm+0x10/0x10 [ 468.243646][T23293] ? aa_sock_opt_perm+0xff/0x1a0 [ 468.243680][T23293] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 468.243714][T23293] ? __pfx_xsk_setsockopt+0x10/0x10 [ 468.243738][T23293] do_sock_setsockopt+0x17c/0x1b0 [ 468.243782][T23293] __x64_sys_setsockopt+0x13d/0x1b0 [ 468.243819][T23293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.243844][T23293] do_syscall_64+0x15f/0xf80 [ 468.243871][T23293] ? trace_irq_disable+0x3b/0x140 [ 468.243895][T23293] ? clear_bhb_loop+0x40/0x90 [ 468.243923][T23293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.243946][T23293] RIP: 0033:0x7fcb9cf9c819 [ 468.243968][T23293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.243988][T23293] RSP: 002b:00007fcb9ddbc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 468.244014][T23293] RAX: ffffffffffffffda RBX: 00007fcb9d215fa0 RCX: 00007fcb9cf9c819 [ 468.244031][T23293] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 468.244044][T23293] RBP: 00007fcb9d032c91 R08: 0000000000000004 R09: 0000000000000000 [ 468.244058][T23293] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.244072][T23293] R13: 00007fcb9d216038 R14: 00007fcb9d215fa0 R15: 00007ffed47943d8 [ 468.244110][T23293] [ 468.246951][T23293] Mem-Info: [ 468.501553][T23298] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8178'. [ 468.503468][T23293] active_anon:9498 inactive_anon:6 isolated_anon:0 [ 468.503468][T23293] active_file:2695 inactive_file:40476 isolated_file:0 [ 468.503468][T23293] unevictable:768 dirty:138 writeback:0 [ 468.503468][T23293] slab_reclaimable:10915 slab_unreclaimable:101892 [ 468.503468][T23293] mapped:29211 shmem:1359 pagetables:3470 [ 468.503468][T23293] sec_pagetables:0 bounce:0 [ 468.503468][T23293] kernel_misc_reclaimable:0 [ 468.503468][T23293] free:1316171 free_pcp:8176 free_cma:0 [ 468.626912][T23293] Node 0 active_anon:40392kB inactive_anon:24kB active_file:10780kB inactive_file:161712kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116844kB dirty:552kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13104kB pagetables:13720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 468.680402][T23293] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 468.724324][T23293] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.755280][T23293] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 468.763480][T23293] Node 0 DMA32 free:1299416kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40392kB inactive_anon:24kB active_file:10780kB inactive_file:161712kB unevictable:1536kB writepending:552kB zspages:0kB present:3129332kB managed:2551532kB mlocked:0kB bounce:0kB free_pcp:30688kB local_pcp:10380kB free_cma:0kB [ 468.835981][T23293] lowmem_reserve[]: 0 0 0 0 0 [ 468.851650][T23293] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 468.912086][T23293] lowmem_reserve[]: 0 0 0 0 0 [ 468.926073][T23293] Node 1 Normal free:3950176kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 468.978988][T23293] lowmem_reserve[]: 0 0 0 0 0 [ 468.991093][T23293] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 469.020467][T23293] Node 0 DMA32: 5840*4kB (UM) 3921*8kB (UME) 2495*16kB (UME) 807*32kB (UME) 1098*64kB (UME) 874*128kB (UME) 612*256kB (UME) 385*512kB (UME) 173*1024kB (UME) 40*2048kB (UME) 95*4096kB (UM) = 1304600kB [ 469.067579][T23293] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 469.130432][T23293] Node 1 Normal: 0*4kB 4*8kB (UM) 4*16kB (UM) 8*32kB (UM) 10*64kB (UM) 7*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 963*4096kB (M) = 3950176kB [ 469.192229][T23293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.203734][T23293] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.214677][T23293] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 469.225217][T23293] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 469.278339][T23293] 44527 total pagecache pages [ 469.291801][T23293] 2 pages in swap cache [ 469.296164][T23293] Free swap = 124988kB [ 469.301213][T23293] Total swap = 124996kB [ 469.305633][T23293] 2097051 pages RAM [ 469.309622][T23293] 0 pages HighMem/MovableOnly [ 469.314463][T23293] 427400 pages reserved [ 469.318916][T23293] 0 pages cma reserved [ 470.214996][T23360] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.8203'. [ 470.374903][T23368] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8205'. [ 470.384838][T23369] bridge_slave_0: left allmulticast mode [ 470.393231][T23370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8206'. [ 470.401534][T23369] bridge_slave_0: left promiscuous mode [ 470.410900][T23369] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.434357][T23369] bridge_slave_1: left promiscuous mode [ 470.440535][T23369] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.472347][T23369] bond0: (slave bond_slave_0): Releasing backup interface [ 470.492386][T23369] bond0: (slave bond_slave_1): Releasing backup interface [ 470.515062][T23369] team0: Port device team_slave_0 removed [ 470.551013][T23369] team0: Port device team_slave_1 removed [ 470.563655][T23369] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 470.663553][T23378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8212'. [ 470.709920][T23378] netlink: 'syz.2.8212': attribute type 1 has an invalid length. [ 470.749031][T23378] netlink: 'syz.2.8212': attribute type 2 has an invalid length. [ 470.987028][T23392] netlink: 'syz.2.8217': attribute type 1 has an invalid length. [ 471.178668][T23403] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.8222'. [ 471.271978][T23405] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8223'. [ 471.486906][T23415] netlink: 'syz.3.8229': attribute type 2 has an invalid length. [ 471.508099][T23415] netlink: 'syz.3.8229': attribute type 2 has an invalid length. [ 471.634836][T23420] block nbd4: Unsupported socket: should be TCP or UNIX. [ 471.701401][T23429] __nla_validate_parse: 1 callbacks suppressed [ 471.701424][T23429] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8233'. [ 472.737783][T23487] batadv_slave_1: entered promiscuous mode [ 472.745554][T23486] batadv_slave_1: left promiscuous mode [ 473.353037][T23515] bridge_slave_1: entered allmulticast mode [ 473.384938][T23521] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 473.430422][T23523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8274'. [ 473.456324][T23523] netlink: 'syz.0.8274': attribute type 7 has an invalid length. [ 473.490355][T23523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8274'. [ 473.646428][T23531] netlink: 'syz.2.8277': attribute type 1 has an invalid length. [ 473.682451][T23531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8277'. [ 474.734062][T23589] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.8303'. [ 474.903675][T23598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8309'. [ 475.177180][T23614] netlink: 'syz.2.8316': attribute type 10 has an invalid length. [ 475.214183][T23614] bridge_slave_1: left allmulticast mode [ 475.235872][T23614] bridge_slave_1: left promiscuous mode [ 475.260127][T23614] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.295239][T23614] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 476.057555][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8336'. [ 476.082513][T23657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8336'. [ 476.104907][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8336'. [ 476.139704][T23657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8336'. [ 476.690266][T23686] syzkaller1: entered promiscuous mode [ 476.703902][T23686] syzkaller1: entered allmulticast mode [ 476.778723][T23688] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 476.962489][T23698] __nla_validate_parse: 3 callbacks suppressed [ 476.962509][T23698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8354'. [ 476.990604][T23698] bond0: ARP target 8.4.0.0 is already present [ 476.997332][T23698] bond0: option arp_ip_target: invalid value (1032) [ 477.006160][T23699] syzkaller1: entered promiscuous mode [ 477.015525][T23699] syzkaller1: entered allmulticast mode [ 478.017225][T23755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8381'. [ 478.087039][ T30] audit: type=1800 audit(1776441767.031:6): pid=23756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8380" name="memory.events" dev="tmpfs" ino=8332 res=0 errno=0 [ 478.107635][T23760] netlink: 'syz.3.8382': attribute type 16 has an invalid length. [ 478.107661][T23760] netlink: 'syz.3.8382': attribute type 17 has an invalid length. [ 478.176337][T23760] erspan0: left promiscuous mode [ 478.202523][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8383'. [ 478.236695][T23760] 8021q: adding VLAN 0 to HW filter on device  [ 478.248993][T23760] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.266991][T23760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.319879][T23764] netlink: 'syz.0.8384': attribute type 1 has an invalid length. [ 478.344400][T23764] netlink: 88 bytes leftover after parsing attributes in process `syz.0.8384'. [ 478.381221][T23764] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8384'. [ 478.412964][T23764] netlink: 'syz.0.8384': attribute type 1 has an invalid length. [ 478.434584][T23764] netlink: 634 bytes leftover after parsing attributes in process `syz.0.8384'. [ 478.435668][T23765] team0: Port device team_slave_0 removed [ 478.536959][T23773] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.8387'. [ 478.696267][T23780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8389'. [ 478.933636][T23792] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8396'. [ 478.953848][T23792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8396'. [ 479.843844][T23836] syzkaller1: entered promiscuous mode [ 479.873391][T23836] syzkaller1: entered allmulticast mode [ 480.051752][T23853] skbuff: bad partial csum: csum=65506/2 headroom=164 headlen=65526 [ 480.070399][ T29] IPVS: starting estimator thread 0... [ 480.169744][T23855] IPVS: using max 28 ests per chain, 67200 per kthread [ 480.483587][T23877] siw: device registration error -23 [ 481.983602][T23953] __nla_validate_parse: 9 callbacks suppressed [ 481.983625][T23953] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.8469'. [ 482.800583][T23991] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 483.921697][T24045] netlink: 'syz.3.8507': attribute type 2 has an invalid length. [ 483.953983][T24045] netlink: 'syz.3.8507': attribute type 2 has an invalid length. [ 483.978847][T24047] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.8508'. [ 484.127821][T24049] macvtap2: entered promiscuous mode [ 484.138618][T24049] macvtap2: entered allmulticast mode [ 484.146335][T24049] veth1_vlan: entered allmulticast mode [ 484.175221][T24049] macvtap3: entered promiscuous mode [ 484.189112][T24049] macvtap3: entered allmulticast mode [ 484.225754][T24058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8512'. [ 485.053885][T24099] sctp: [Deprecated]: syz.0.8528 (pid 24099) Use of int in max_burst socket option deprecated. [ 485.053885][T24099] Use struct sctp_assoc_value instead [ 485.076433][T24098] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8529'. [ 485.098651][T24101] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8530'. [ 485.131255][T24101] netlink: 'syz.2.8530': attribute type 7 has an invalid length. [ 485.156309][T24101] netlink: 'syz.2.8530': attribute type 8 has an invalid length. [ 485.171768][T24101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8530'. [ 485.383737][T24113] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8536'. [ 486.044413][T24140] netlink: 'syz.4.8548': attribute type 10 has an invalid length. [ 486.060913][T24140] bridge_slave_1: left allmulticast mode [ 486.249346][T24148] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.8551'. [ 486.733910][T24166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8561'. [ 486.754110][T24171] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8561'. [ 487.253666][T24198] Bluetooth: MGMT ver 1.23 [ 488.086449][T24234] syzkaller1: entered promiscuous mode [ 488.111910][T24234] syzkaller1: entered allmulticast mode [ 488.374551][T24242] __nla_validate_parse: 2 callbacks suppressed [ 488.374576][T24242] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8595'. [ 488.426776][T24242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8595'. [ 488.702283][T24258] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8603'. [ 489.256413][T24290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8613'. [ 489.331478][ T5836] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 489.340120][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 489.933102][T24320] syzkaller1: entered promiscuous mode [ 489.949437][T24320] syzkaller1: entered allmulticast mode [ 490.336831][T24340] netdevsim netdevsim4: Direct firmware load for r1 failed with error -2 [ 490.361899][T24340] netdevsim netdevsim4: Falling back to sysfs fallback for: r1 [ 490.515616][T24349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8643'. [ 490.550501][T24350] sctp: [Deprecated]: syz.3.8642 (pid 24350) Use of int in max_burst socket option. [ 490.550501][T24350] Use struct sctp_assoc_value instead [ 490.662099][T24354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8645'. [ 490.682609][T24354] netlink: 65011 bytes leftover after parsing attributes in process `syz.1.8645'. [ 491.415243][T24396] netlink: 'syz.0.8661': attribute type 1 has an invalid length. [ 492.840448][T24465] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8692'. [ 493.227669][T24487] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8701'. [ 493.530718][T24501] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8709'. [ 495.117631][T24589] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8748'. [ 495.153806][T24589] netlink: ct family unspecified [ 495.694459][T24621] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8763'. [ 495.761895][T24623] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8764'. [ 495.980581][T24633] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 496.720555][T24661] block nbd4: server does not support multiple connections per device. [ 496.748462][T24661] block nbd4: shutting down sockets [ 496.763755][T24668] syzkaller1: entered promiscuous mode [ 496.778947][T24668] syzkaller1: entered allmulticast mode [ 496.829931][T24672] nbd: nbd3 already in use [ 496.862732][T24672] block nbd3: NBD_DISCONNECT [ 496.879041][T24672] block nbd3: Send disconnect failed -32 [ 496.918334][T24672] block nbd3: shutting down sockets [ 497.609423][T24706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8800'. [ 497.810468][T24719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8805'. [ 498.758380][T24765] netlink: 67 bytes leftover after parsing attributes in process `syz.0.8824'. [ 498.941311][T24772] syzkaller1: entered promiscuous mode [ 498.956208][T24772] syzkaller1: entered allmulticast mode [ 499.321595][T24788] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 499.494579][T24799] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8841'. [ 499.561249][T24801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8842'. [ 499.902400][T24818] netlink: 27 bytes leftover after parsing attributes in process `syz.0.8848'. [ 500.196694][T24833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 500.425337][T24843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8858'. [ 500.856409][T24862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8863'. [ 501.211275][T24881] sock: sock_set_timeout: `syz.4.8868' (pid 24881) tries to set negative timeout [ 501.384800][T24890] netlink: 'syz.3.8871': attribute type 9 has an invalid length. [ 501.406659][T24890] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8871'. [ 501.449986][T24893] pim6reg1: entered promiscuous mode [ 501.455624][T24893] pim6reg1: entered allmulticast mode [ 501.466709][T24895] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8874'. [ 501.743408][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.851307][T24915] sctp: [Deprecated]: syz.3.8882 (pid 24915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.851307][T24915] Use struct sctp_sack_info instead [ 502.032177][T24921] tipc: Enabling of bearer rejected, already enabled [ 502.814274][T24961] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8902'. [ 503.101992][T24975] tipc: Disabling bearer [ 503.275496][T24975] tipc: Disabling bearer [ 503.611440][T24998] xt_hashlimit: size too large, truncated to 1048576 [ 504.610052][ T5830] Bluetooth: hci4: command 0x0405 tx timeout [ 504.821604][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8938'. [ 505.606720][T25083] xt_hashlimit: size too large, truncated to 1048576 [ 505.852866][T25091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8955'. [ 506.438938][T25098] syzkaller1: entered promiscuous mode [ 506.447760][T25098] syzkaller1: entered allmulticast mode [ 506.527879][T25113] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.8962'. [ 506.857896][T25129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8970'. [ 507.011739][T25136] netlink: 'syz.4.8974': attribute type 21 has an invalid length. [ 507.032580][T25136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8974'. [ 507.119642][T25136] netlink: 'syz.4.8974': attribute type 21 has an invalid length. [ 507.138059][T25136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8974'. [ 507.278699][T25148] netlink: 'syz.2.8979': attribute type 9 has an invalid length. [ 507.287663][T25148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8979'. [ 507.298301][T25148] netlink: 'syz.2.8979': attribute type 9 has an invalid length. [ 507.306822][T25148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8979'. [ 507.467410][T25157] netlink: 'syz.2.8983': attribute type 15 has an invalid length. [ 507.826520][T25171] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8989'. [ 508.392759][T25193] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 508.454112][T25195] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9000'. [ 508.464787][T25195] netlink: Conntrack attr has 4 unknown bytes [ 508.593548][T25201] veth0: entered promiscuous mode [ 508.683548][T25205] netlink: 'syz.0.9005': attribute type 1 has an invalid length. [ 508.833492][T25207] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 508.844443][T25207] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 508.861657][T25207] bond4: (slave ip6gre2): making interface the new active one [ 508.901749][T25207] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 509.575129][T25248] netlink: 'syz.1.9021': attribute type 21 has an invalid length. [ 509.585225][T25248] netlink: 'syz.1.9021': attribute type 22 has an invalid length. [ 509.593997][T25248] netlink: 'syz.1.9021': attribute type 23 has an invalid length. [ 509.602751][T25248] netlink: 'syz.1.9021': attribute type 25 has an invalid length. [ 509.913778][ T5836] block nbd3: Receive control failed (result -107) [ 509.934094][T25260] nbd3: detected capacity change from 0 to 127 [ 509.948679][T25262] syzkaller1: entered promiscuous mode [ 509.954710][T25262] syzkaller1: entered allmulticast mode [ 509.964318][ T5969] block nbd3: Dead connection, failed to find a fallback [ 509.981298][ T5969] block nbd3: shutting down sockets [ 509.992267][ T5969] blk_print_req_error: 138 callbacks suppressed [ 509.992287][ T5969] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.012109][ T5969] buffer_io_error: 138 callbacks suppressed [ 510.012130][ T5969] Buffer I/O error on dev nbd3, logical block 0, async page read [ 510.027379][ T5969] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.037636][ T5969] Buffer I/O error on dev nbd3, logical block 1, async page read [ 510.048684][ T5969] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.058653][ T5969] Buffer I/O error on dev nbd3, logical block 2, async page read [ 510.068786][ T5969] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.078302][ T5969] Buffer I/O error on dev nbd3, logical block 3, async page read [ 510.087256][ T5969] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.102942][ T5969] Buffer I/O error on dev nbd3, logical block 0, async page read [ 510.111887][ T5969] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.133813][ T5969] Buffer I/O error on dev nbd3, logical block 1, async page read [ 510.151561][ T5969] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.161514][ T5969] Buffer I/O error on dev nbd3, logical block 2, async page read [ 510.171204][ T5969] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.181392][ T5969] Buffer I/O error on dev nbd3, logical block 3, async page read [ 510.189890][ T5969] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.201082][ T5969] Buffer I/O error on dev nbd3, logical block 0, async page read [ 510.209938][ T5969] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 510.250609][ T5969] Buffer I/O error on dev nbd3, logical block 1, async page read [ 510.291453][ T5969] ldm_validate_partition_table(): Disk read failed. [ 510.324751][ T5969] Dev nbd3: unable to read RDB block 0 [ 510.334633][ T5969] nbd3: unable to read partition table [ 510.348950][T25245] [ 510.351350][T25245] ====================================================== [ 510.358422][T25245] WARNING: possible circular locking dependency detected [ 510.365497][T25245] syzkaller #0 Not tainted [ 510.369950][T25245] ------------------------------------------------------ [ 510.377025][T25245] syz.3.9020/25245 is trying to acquire lock: [ 510.383130][T25245] ffffffff8ea84780 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 510.393063][T25245] [ 510.393063][T25245] but task is already holding lock: [ 510.400464][T25245] ffff8880557f9c60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 510.409150][T25245] [ 510.409150][T25245] which lock already depends on the new lock. [ 510.409150][T25245] [ 510.419592][T25245] [ 510.419592][T25245] the existing dependency chain (in reverse order) is: [ 510.428643][T25245] [ 510.428643][T25245] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 510.436359][T25245] lock_sock_nested+0x41/0x100 [ 510.441724][T25245] inet_shutdown+0x6a/0x390 [ 510.446797][T25245] nbd_mark_nsock_dead+0x2e9/0x560 [ 510.452488][T25245] recv_work+0x1c2e/0x1d40 [ 510.457479][T25245] process_scheduled_works+0xb5d/0x1860 [ 510.463593][T25245] worker_thread+0xa53/0xfc0 [ 510.468763][T25245] kthread+0x388/0x470 [ 510.473405][T25245] ret_from_fork+0x514/0xb70 [ 510.478550][T25245] ret_from_fork_asm+0x1a/0x30 [ 510.483867][T25245] [ 510.483867][T25245] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 510.491543][T25245] __mutex_lock+0x1a3/0x1550 [ 510.496679][T25245] nbd_queue_rq+0x37b/0x1100 [ 510.501812][T25245] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 510.507922][T25245] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 510.514802][T25245] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 510.521333][T25245] blk_mq_run_hw_queue+0x348/0x4f0 [ 510.526998][T25245] blk_mq_dispatch_list+0xd16/0xe10 [ 510.532820][T25245] blk_mq_flush_plug_list+0x48d/0x570 [ 510.538767][T25245] __blk_flush_plug+0x3ed/0x4d0 [ 510.544172][T25245] __submit_bio+0x28d/0x580 [ 510.549235][T25245] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 510.555420][T25245] block_read_full_folio+0x599/0x830 [ 510.561271][T25245] filemap_read_folio+0x137/0x3b0 [ 510.566837][T25245] do_read_cache_folio+0x358/0x590 [ 510.572495][T25245] read_part_sector+0xb6/0x2b0 [ 510.577804][T25245] adfspart_check_ICS+0xb1/0x960 [ 510.583289][T25245] bdev_disk_changed+0x817/0x1770 [ 510.588854][T25245] blkdev_get_whole+0x380/0x510 [ 510.594257][T25245] bdev_open+0x31e/0xd30 [ 510.599099][T25245] blkdev_open+0x470/0x610 [ 510.604073][T25245] do_dentry_open+0x785/0x14e0 [ 510.609393][T25245] vfs_open+0x3b/0x340 [ 510.614012][T25245] path_openat+0x2e08/0x3860 [ 510.619195][T25245] do_file_open+0x23e/0x4a0 [ 510.624263][T25245] do_sys_openat2+0x113/0x200 [ 510.629488][T25245] __x64_sys_openat+0x138/0x170 [ 510.634891][T25245] do_syscall_64+0x15f/0xf80 [ 510.640026][T25245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.646460][T25245] [ 510.646460][T25245] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 510.653710][T25245] __mutex_lock+0x1a3/0x1550 [ 510.658847][T25245] nbd_queue_rq+0xc6/0x1100 [ 510.663898][T25245] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 510.670420][T25245] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 510.677294][T25245] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 510.683847][T25245] blk_mq_run_hw_queue+0x348/0x4f0 [ 510.689548][T25245] blk_mq_dispatch_list+0xd16/0xe10 [ 510.695289][T25245] blk_mq_flush_plug_list+0x48d/0x570 [ 510.701210][T25245] __blk_flush_plug+0x3ed/0x4d0 [ 510.706607][T25245] __submit_bio+0x28d/0x580 [ 510.711647][T25245] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 510.717830][T25245] block_read_full_folio+0x599/0x830 [ 510.723662][T25245] filemap_read_folio+0x137/0x3b0 [ 510.729234][T25245] do_read_cache_folio+0x358/0x590 [ 510.734908][T25245] read_part_sector+0xb6/0x2b0 [ 510.740220][T25245] adfspart_check_ICS+0xb1/0x960 [ 510.745700][T25245] bdev_disk_changed+0x817/0x1770 [ 510.751290][T25245] blkdev_get_whole+0x380/0x510 [ 510.756690][T25245] bdev_open+0x31e/0xd30 [ 510.761487][T25245] blkdev_open+0x470/0x610 [ 510.766461][T25245] do_dentry_open+0x785/0x14e0 [ 510.771771][T25245] vfs_open+0x3b/0x340 [ 510.776400][T25245] path_openat+0x2e08/0x3860 [ 510.781632][T25245] do_file_open+0x23e/0x4a0 [ 510.786686][T25245] do_sys_openat2+0x113/0x200 [ 510.791909][T25245] __x64_sys_openat+0x138/0x170 [ 510.797305][T25245] do_syscall_64+0x15f/0xf80 [ 510.802450][T25245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.808884][T25245] [ 510.808884][T25245] -> #3 (set->srcu){.+.+}-{0:0}: [ 510.816059][T25245] __synchronize_srcu+0xca/0x300 [ 510.821559][T25245] elevator_switch+0x1e8/0x7a0 [ 510.826866][T25245] elevator_change+0x2cc/0x450 [ 510.832167][T25245] elevator_set_default+0x36c/0x430 [ 510.837903][T25245] blk_register_queue+0x3e9/0x4e0 [ 510.843467][T25245] __add_disk+0x677/0xd50 [ 510.848343][T25245] add_disk_fwnode+0xfb/0x480 [ 510.853571][T25245] nbd_dev_add+0x72c/0xb50 [ 510.858531][T25245] nbd_init+0x168/0x1f0 [ 510.863243][T25245] do_one_initcall+0x250/0x870 [ 510.868563][T25245] do_initcall_level+0x104/0x190 [ 510.874045][T25245] do_initcalls+0x59/0xa0 [ 510.878917][T25245] kernel_init_freeable+0x2a6/0x3e0 [ 510.884667][T25245] kernel_init+0x1d/0x1d0 [ 510.889550][T25245] ret_from_fork+0x514/0xb70 [ 510.894688][T25245] ret_from_fork_asm+0x1a/0x30 [ 510.900005][T25245] [ 510.900005][T25245] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 510.907849][T25245] __mutex_lock+0x1a3/0x1550 [ 510.913004][T25245] elevator_change+0x1b3/0x450 [ 510.918318][T25245] elevator_set_none+0xb5/0x140 [ 510.923727][T25245] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 510.930086][T25245] nbd_start_device+0x17f/0xb10 [ 510.935482][T25245] nbd_genl_connect+0x165b/0x1cf0 [ 510.941058][T25245] genl_family_rcv_msg_doit+0x22a/0x330 [ 510.947156][T25245] genl_rcv_msg+0x61c/0x7a0 [ 510.952203][T25245] netlink_rcv_skb+0x232/0x4b0 [ 510.957526][T25245] genl_rcv+0x28/0x40 [ 510.962057][T25245] netlink_unicast+0x75c/0x8e0 [ 510.967378][T25245] netlink_sendmsg+0x813/0xb40 [ 510.972697][T25245] ____sys_sendmsg+0x972/0x9f0 [ 510.978069][T25245] ___sys_sendmsg+0x2a5/0x360 [ 510.983412][T25245] __x64_sys_sendmsg+0x1bd/0x2a0 [ 510.988920][T25245] do_syscall_64+0x15f/0xf80 [ 510.994071][T25245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.000521][T25245] [ 511.000521][T25245] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 511.009185][T25245] blk_alloc_queue+0x546/0x680 [ 511.014538][T25245] __blk_mq_alloc_disk+0x197/0x390 [ 511.020214][T25245] nbd_dev_add+0x499/0xb50 [ 511.025269][T25245] nbd_init+0x168/0x1f0 [ 511.029991][T25245] do_one_initcall+0x250/0x870 [ 511.035312][T25245] do_initcall_level+0x104/0x190 [ 511.040808][T25245] do_initcalls+0x59/0xa0 [ 511.045782][T25245] kernel_init_freeable+0x2a6/0x3e0 [ 511.051528][T25245] kernel_init+0x1d/0x1d0 [ 511.056418][T25245] ret_from_fork+0x514/0xb70 [ 511.061565][T25245] ret_from_fork_asm+0x1a/0x30 [ 511.066927][T25245] [ 511.066927][T25245] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 511.074178][T25245] __lock_acquire+0x15a5/0x2cf0 [ 511.079584][T25245] lock_acquire+0x106/0x350 [ 511.084642][T25245] fs_reclaim_acquire+0x71/0x100 [ 511.090120][T25245] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 511.096485][T25245] __alloc_skb+0x1d0/0x7d0 [ 511.101457][T25245] tcp_send_active_reset+0x8a/0x5a0 [ 511.107212][T25245] __tcp_close+0x4c5/0xfe0 [ 511.112181][T25245] tcp_close+0x28/0x110 [ 511.116897][T25245] inet_release+0x143/0x190 [ 511.121969][T25245] sock_close+0xc3/0x240 [ 511.126768][T25245] __fput+0x44f/0xa60 [ 511.131391][T25245] task_work_run+0x1d9/0x270 [ 511.136535][T25245] get_signal+0x11eb/0x1330 [ 511.141585][T25245] arch_do_signal_or_restart+0xbc/0x830 [ 511.147677][T25245] exit_to_user_mode_loop+0x86/0x480 [ 511.153511][T25245] do_syscall_64+0x33e/0xf80 [ 511.158651][T25245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.165098][T25245] [ 511.165098][T25245] other info that might help us debug this: [ 511.165098][T25245] [ 511.175346][T25245] Chain exists of: [ 511.175346][T25245] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET [ 511.175346][T25245] [ 511.187984][T25245] Possible unsafe locking scenario: [ 511.187984][T25245] [ 511.195466][T25245] CPU0 CPU1 [ 511.200863][T25245] ---- ---- [ 511.206246][T25245] lock(sk_lock-AF_INET); [ 511.210686][T25245] lock(&nsock->tx_lock); [ 511.217649][T25245] lock(sk_lock-AF_INET); [ 511.224615][T25245] lock(fs_reclaim); [ 511.228629][T25245] [ 511.228629][T25245] *** DEADLOCK *** [ 511.228629][T25245] [ 511.236844][T25245] 2 locks held by syz.3.9020/25245: [ 511.242103][T25245] #0: ffff888057903e40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 511.252341][T25245] #1: ffff8880557f9c60 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 511.261446][T25245] [ 511.261446][T25245] stack backtrace: [ 511.267358][T25245] CPU: 1 UID: 0 PID: 25245 Comm: syz.3.9020 Not tainted syzkaller #0 PREEMPT(full) [ 511.267381][T25245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 511.267393][T25245] Call Trace: [ 511.267401][T25245] [ 511.267409][T25245] dump_stack_lvl+0xe8/0x150 [ 511.267446][T25245] print_circular_bug+0x2e1/0x300 [ 511.267477][T25245] check_noncircular+0x12e/0x150 [ 511.267509][T25245] __lock_acquire+0x15a5/0x2cf0 [ 511.267535][T25245] ? __lock_acquire+0x6b5/0x2cf0 [ 511.267563][T25245] ? do_raw_spin_lock+0x12b/0x2f0 [ 511.267580][T25245] ? inet_unhash+0x1fe/0xab0 [ 511.267605][T25245] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 511.267631][T25245] lock_acquire+0x106/0x350 [ 511.267654][T25245] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 511.267681][T25245] ? lock_acquire+0x106/0x350 [ 511.267708][T25245] fs_reclaim_acquire+0x71/0x100 [ 511.267724][T25245] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 511.267749][T25245] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 511.267777][T25245] ? __alloc_skb+0x1d0/0x7d0 [ 511.267800][T25245] ? __local_bh_enable_ip+0xd0/0x130 [ 511.267827][T25245] __alloc_skb+0x1d0/0x7d0 [ 511.267852][T25245] ? __pfx_skb_attempt_defer_free+0x10/0x10 [ 511.267882][T25245] tcp_send_active_reset+0x8a/0x5a0 [ 511.267910][T25245] ? __sk_mem_reduce_allocated+0x270/0x3f0 [ 511.267932][T25245] __tcp_close+0x4c5/0xfe0 [ 511.267958][T25245] tcp_close+0x28/0x110 [ 511.267980][T25245] inet_release+0x143/0x190 [ 511.268008][T25245] sock_close+0xc3/0x240 [ 511.268028][T25245] ? __pfx_sock_close+0x10/0x10 [ 511.268047][T25245] __fput+0x44f/0xa60 [ 511.268074][T25245] task_work_run+0x1d9/0x270 [ 511.268095][T25245] ? __pfx_task_work_run+0x10/0x10 [ 511.268115][T25245] ? __fput_deferred+0x216/0x380 [ 511.268136][T25245] ? __pfx___fput_deferred+0x10/0x10 [ 511.268158][T25245] ? tcp_sendmsg+0x39/0x50 [ 511.268178][T25245] ? __local_bh_enable_ip+0xd0/0x130 [ 511.268204][T25245] get_signal+0x11eb/0x1330 [ 511.268229][T25245] ? __sys_sendto+0x598/0x710 [ 511.268263][T25245] ? do_futex+0x333/0x420 [ 511.268294][T25245] arch_do_signal_or_restart+0xbc/0x830 [ 511.268319][T25245] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 511.268349][T25245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.268368][T25245] exit_to_user_mode_loop+0x86/0x480 [ 511.268390][T25245] ? rcu_is_watching+0x15/0xb0 [ 511.268423][T25245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.268442][T25245] do_syscall_64+0x33e/0xf80 [ 511.268465][T25245] ? trace_irq_disable+0x3b/0x140 [ 511.268484][T25245] ? clear_bhb_loop+0x40/0x90 [ 511.268504][T25245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.268522][T25245] RIP: 0033:0x7fcb9cf9c819 [ 511.268540][T25245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.268557][T25245] RSP: 002b:00007fcb9ddbc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 511.268576][T25245] RAX: 0000000000290000 RBX: 00007fcb9d215fa0 RCX: 00007fcb9cf9c819 [ 511.268589][T25245] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000003 [ 511.268602][T25245] RBP: 00007fcb9d032c91 R08: 0000000000000000 R09: 0000000000000000 [ 511.268614][T25245] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 511.268625][T25245] R13: 00007fcb9d216038 R14: 00007fcb9d215fa0 R15: 00007ffed47943d8 [ 511.268648][T25245] [ 511.607518][ T5969] ldm_validate_partition_table(): Disk read failed. [ 511.615989][ T5969] Dev nbd3: unable to read RDB block 0 [ 511.622914][ T5969] nbd3: unable to read partition table