last executing test programs: 1.665079471s ago: executing program 3 (id=5321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08"], 0x25) 1.348008703s ago: executing program 0 (id=5326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)="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", 0x4b1}], 0x1}, 0x4) 1.297709359s ago: executing program 0 (id=5328): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) close(0x4) 1.098191089s ago: executing program 0 (id=5342): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1.04490429s ago: executing program 3 (id=5332): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0x9e2}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 1.043843026s ago: executing program 1 (id=5333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x204, 0x3ff, 0x7}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x9, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) 1.043627127s ago: executing program 2 (id=5334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xf07, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 923.955373ms ago: executing program 4 (id=5335): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002640)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="e4", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x8080) sendmsg$alg(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)='\\', 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x4811) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) 873.43588ms ago: executing program 3 (id=5336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) close(0x3) 826.127003ms ago: executing program 4 (id=5337): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x400) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x10000000}) 758.886523ms ago: executing program 2 (id=5338): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) 757.475786ms ago: executing program 1 (id=5350): r0 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x40) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000100)=@routing={0xc, 0xa, 0x0, 0x0, 0x0, [@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @ipv4={'\x00', '\xff\xff', @remote}, @loopback]}, 0x58) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x3}, 0x1c) 714.941957ms ago: executing program 3 (id=5339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0xfffffffffffffeef, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {0xfff2, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 672.620894ms ago: executing program 4 (id=5341): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)="604f3ba2fdb12384e5", 0x9}], 0x1, 0x0, 0x0, 0x4000}, 0x1) recvmmsg$unix(r1, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/134, 0x86}], 0x1}}], 0x1, 0xa120, 0x0) 653.577183ms ago: executing program 1 (id=5343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e2f76d240500d7a03b00", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)="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", 0x4b1}], 0x1}, 0x4) 603.913284ms ago: executing program 2 (id=5344): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) 587.484691ms ago: executing program 0 (id=5345): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x70083}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 530.842984ms ago: executing program 4 (id=5346): ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x2c020400) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) 509.702084ms ago: executing program 2 (id=5347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4c24, 0x3, @local, 0x2000009}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 484.555206ms ago: executing program 1 (id=5348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 394.594729ms ago: executing program 3 (id=5349): socket(0xa, 0x3, 0x87) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$xdp(0x2c, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 346.876226ms ago: executing program 0 (id=5351): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x18, 0x140c, 0x4, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x20000056) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}]}, 0x50}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 339.586905ms ago: executing program 2 (id=5352): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x47, 0x0) 314.466516ms ago: executing program 4 (id=5353): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r1, 0x2, 0x6, @local}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) 183.812912ms ago: executing program 3 (id=5354): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 176.386464ms ago: executing program 0 (id=5355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa2000000000000070200e7f7ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) 156.715812ms ago: executing program 2 (id=5356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}}}, 0x108) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x60, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x900}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x60}}, 0x0) 146.219237ms ago: executing program 1 (id=5357): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x2339) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 60.277489ms ago: executing program 4 (id=5358): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c) 0s ago: executing program 1 (id=5359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): dge0: port 2(bridge_slave_1) entered blocking state [ 93.628594][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.666926][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.728992][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.736427][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.773734][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.780951][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.806766][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.890446][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.922726][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.954232][ T5873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.099401][ T5866] veth0_vlan: entered promiscuous mode [ 94.177724][ T5866] veth1_vlan: entered promiscuous mode [ 94.198648][ T5181] Bluetooth: hci3: command tx timeout [ 94.266670][ T5181] Bluetooth: hci1: command tx timeout [ 94.272155][ T5181] Bluetooth: hci4: command tx timeout [ 94.278146][ T5181] Bluetooth: hci0: command tx timeout [ 94.282407][ T5880] Bluetooth: hci2: command tx timeout [ 94.302886][ T5866] veth0_macvtap: entered promiscuous mode [ 94.324329][ T5866] veth1_macvtap: entered promiscuous mode [ 94.456461][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.525540][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.622527][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.646043][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.654993][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.689096][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.725155][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.840246][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.878241][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.912168][ T5868] veth0_vlan: entered promiscuous mode [ 94.936244][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.952895][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.012218][ T5868] veth1_vlan: entered promiscuous mode [ 95.042970][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.056895][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.061247][ T5858] veth0_vlan: entered promiscuous mode [ 95.129309][ T5873] veth0_vlan: entered promiscuous mode [ 95.149669][ T5860] veth0_vlan: entered promiscuous mode [ 95.165925][ T5858] veth1_vlan: entered promiscuous mode [ 95.201738][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.203272][ T5868] veth0_macvtap: entered promiscuous mode [ 95.235000][ T5873] veth1_vlan: entered promiscuous mode [ 95.248133][ T5868] veth1_macvtap: entered promiscuous mode [ 95.285400][ T5860] veth1_vlan: entered promiscuous mode [ 95.361499][ T5983] C: renamed from team_slave_0 (while UP) [ 95.374198][ T5983] netlink: 'syz.3.4': attribute type 4 has an invalid length. [ 95.383133][ T5983] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 95.417813][ T5858] veth0_macvtap: entered promiscuous mode [ 95.454236][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.468989][ T5858] veth1_macvtap: entered promiscuous mode [ 95.513573][ T5873] veth0_macvtap: entered promiscuous mode [ 95.532054][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.559939][ T5860] veth0_macvtap: entered promiscuous mode [ 95.581780][ T5873] veth1_macvtap: entered promiscuous mode [ 95.622264][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.639645][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.654619][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.677070][ T5860] veth1_macvtap: entered promiscuous mode [ 95.690339][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.711938][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.723745][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.800659][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.824469][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.839084][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.863166][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.902695][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.928266][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.963672][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.996251][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.133332][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.142838][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.194448][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.240206][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.265976][ T5880] Bluetooth: hci3: command tx timeout [ 96.291107][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.347010][ T5880] Bluetooth: hci2: command tx timeout [ 96.347028][ T5869] Bluetooth: hci0: command tx timeout [ 96.347065][ T5869] Bluetooth: hci4: command tx timeout [ 96.352564][ T5880] Bluetooth: hci1: command tx timeout [ 96.368873][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.377890][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.401959][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.434062][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.521343][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.556504][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.561644][ T5968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.564895][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.588988][ T5968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.626453][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.634506][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.740273][ T5968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.752052][ T5968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.852677][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.869378][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.051401][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.091970][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.113277][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.115341][ T6009] netlink: 324 bytes leftover after parsing attributes in process `syz.3.15'. [ 97.155300][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.341000][ T6011] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.647006][ T6020] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 97.663480][ T6020] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 97.675871][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18'. [ 97.690354][ T6020] block nbd0: shutting down sockets [ 98.079767][ T6032] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 98.116659][ C1] Illegal XDP return value 16128 on prog (id 6) dev lo, expect packet loss! [ 101.103957][ T6105] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.224851][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.444502][ T6114] tap0: tun_chr_ioctl cmd 1074025676 [ 101.470486][ T6114] tap0: owner set to 0 [ 101.532189][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.61'. [ 101.797334][ T6129] netlink: 'syz.0.66': attribute type 1 has an invalid length. [ 103.204314][ T6178] netem: incorrect ge model size [ 103.236020][ T6178] netem: change failed [ 103.785841][ T6201] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 103.841373][ T6201] netlink: 172 bytes leftover after parsing attributes in process `syz.4.99'. [ 103.929095][ T6201] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 104.363444][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'. [ 104.399102][ T6223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.110'. [ 104.410800][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'. [ 104.423655][ T6223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.110'. [ 104.622189][ T6229] veth0_to_bridge: entered promiscuous mode [ 104.650536][ T6228] veth0_to_bridge: left promiscuous mode [ 105.042825][ T6240] netlink: 84 bytes leftover after parsing attributes in process `syz.4.117'. [ 106.042524][ T6273] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 106.385302][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 106.665935][ T6296] netlink: 128 bytes leftover after parsing attributes in process `syz.4.142'. [ 107.342931][ T6320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 107.360253][ T6319] netlink: 164548 bytes leftover after parsing attributes in process `syz.1.153'. [ 107.405318][ T6320] netlink: 'syz.0.152': attribute type 13 has an invalid length. [ 107.420525][ T6320] netlink: 'syz.0.152': attribute type 12 has an invalid length. [ 107.444799][ T6320] Zero length message leads to an empty skb [ 107.455940][ T6322] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 107.464125][ T6322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.757385][ T6328] nbd0: detected capacity change from 0 to 127 [ 107.797028][ T5880] block nbd0: Receive control failed (result -32) [ 107.823433][ T5915] block nbd0: Dead connection, failed to find a fallback [ 107.915417][ T6336] netlink: 'syz.1.161': attribute type 1 has an invalid length. [ 107.954083][ T6336] netlink: 'syz.1.161': attribute type 1 has an invalid length. [ 108.421462][ T6355] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 108.664436][ T6332] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 109.755712][ T59] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.815827][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.857791][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.872768][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.952220][ T5880] Bluetooth: hci4: command 0x0401 tx timeout [ 110.030333][ T6407] __nla_validate_parse: 4 callbacks suppressed [ 110.030357][ T6407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'. [ 110.047465][ T6407] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 110.234593][ T6415] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 111.856524][ T6466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'. [ 111.935233][ T6466] netem: change failed [ 114.138222][ T6529] bridge0: entered promiscuous mode [ 114.642755][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 114.684325][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 115.072814][ T6560] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.261'. [ 115.136509][ T6563] openvswitch: netlink: Multiple metadata blocks provided [ 115.387364][ T5915] block nbd0: shutting down sockets [ 115.392967][ T5915] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.449098][ T5915] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.482012][ T5915] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.508964][ T5915] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.559428][ T5915] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.583711][ T5915] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.612766][ T5915] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.658222][ T5915] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.688760][ T5915] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.702995][ T5915] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.714458][ T5915] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.758918][ T5915] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.771291][ T5915] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.800451][ T5915] Buffer I/O error on dev nbd0, logical block 2, async page read [ 115.814653][ T5915] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.832448][ T5915] Buffer I/O error on dev nbd0, logical block 3, async page read [ 115.841394][ T5915] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.884164][ T5915] Buffer I/O error on dev nbd0, logical block 0, async page read [ 115.912404][ T5915] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 115.934481][ T5915] Buffer I/O error on dev nbd0, logical block 1, async page read [ 115.963863][ T5915] ldm_validate_partition_table(): Disk read failed. [ 115.978834][ T5915] Dev nbd0: unable to read RDB block 0 [ 115.993937][ T5915] nbd0: unable to read partition table [ 116.045917][ T5915] ldm_validate_partition_table(): Disk read failed. [ 116.062676][ T5915] Dev nbd0: unable to read RDB block 0 [ 116.074204][ T5915] nbd0: unable to read partition table [ 116.367731][ T6599] vlan3: entered promiscuous mode [ 116.385348][ T6599] bond0: entered promiscuous mode [ 116.391591][ T6599] bond_slave_0: entered promiscuous mode [ 116.400822][ T6599] bond_slave_1: entered promiscuous mode [ 119.443766][ T6692] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.323'. [ 121.368867][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 121.487674][ T6756] netlink: 'syz.1.353': attribute type 3 has an invalid length. [ 121.495906][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 121.532558][ T6756] netlink: 'syz.1.353': attribute type 3 has an invalid length. [ 121.559003][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 121.589070][ T6758] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 121.604643][ T6758] syzkaller1: linktype set to 823 [ 122.920214][ T6797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 123.268309][ T6808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 123.283870][ T6808] netlink: 120 bytes leftover after parsing attributes in process `syz.0.376'. [ 123.319732][ T6808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.376'. [ 124.261083][ T6814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.275748][ T6814] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 124.352966][ T6814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.386917][ T6814] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 124.432822][ T6814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.459595][ T6814] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 124.496747][ T6814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.515300][ T6814] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 124.543120][ T6814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.560348][ T6814] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 125.784334][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.408'. [ 126.130787][ T6918] netlink: 256 bytes leftover after parsing attributes in process `syz.4.415'. [ 126.612340][ T6941] tun0: tun_chr_ioctl cmd 35111 [ 128.176378][ T7009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.233131][ T7009] bond0: (slave bond1): Enslaving as an active interface with an up link [ 128.765897][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 128.797874][ T7040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.458'. [ 130.406692][ T7104] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 130.414516][ T7104] netlink: 144 bytes leftover after parsing attributes in process `syz.2.482'. [ 130.463309][ T7104] netlink: 36 bytes leftover after parsing attributes in process `syz.2.482'. [ 130.601664][ T7119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 130.645167][ T7119] block nbd0: backend image doesn't match with ªªªªª [ 130.783339][ T7127] netlink: 44 bytes leftover after parsing attributes in process `syz.4.492'. [ 130.813680][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.492'. [ 131.050302][ T7142] netlink: 'syz.4.498': attribute type 9 has an invalid length. [ 131.087117][ T7142] netlink: 'syz.4.498': attribute type 6 has an invalid length. [ 132.441345][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 132.518550][ T7214] netlink: 'syz.3.528': attribute type 21 has an invalid length. [ 132.526024][ T7216] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 132.576761][ T7214] netlink: 128 bytes leftover after parsing attributes in process `syz.3.528'. [ 132.615459][ T7214] netlink: 3 bytes leftover after parsing attributes in process `syz.3.528'. [ 132.668679][ T7219] team0: Device sit1 is of different type [ 133.293910][ T7249] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 133.312710][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.339703][ T7249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.481319][ T7258] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 133.500806][ T7258] netlink: 'syz.1.547': attribute type 4 has an invalid length. [ 134.518413][ T7309] __nla_validate_parse: 2 callbacks suppressed [ 134.518437][ T7309] netlink: 277 bytes leftover after parsing attributes in process `syz.2.572'. [ 135.474899][ T7357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 135.763201][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 136.482662][ T7402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.617'. [ 136.770055][ T7414] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 136.774036][ T7416] netlink: 'syz.2.624': attribute type 9 has an invalid length. [ 136.801951][ T7414] netlink: 144 bytes leftover after parsing attributes in process `syz.0.622'. [ 136.820573][ T7414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.622'. [ 136.823783][ T7421] netlink: 'syz.4.625': attribute type 3 has an invalid length. [ 136.856834][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 137.613297][ T7463] netlink: 10 bytes leftover after parsing attributes in process `syz.4.647'. [ 137.985171][ T7481] IPv6: addrconf: prefix option has invalid lifetime [ 138.063640][ T7487] netlink: 32 bytes leftover after parsing attributes in process `syz.4.657'. [ 138.172982][ T7492] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 138.184797][ T7489] IPVS: stopping backup sync thread 7492 ... [ 138.586404][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 138.934685][ T7527] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 138.955428][ T7532] netlink: 'syz.0.679': attribute type 64 has an invalid length. [ 138.963657][ T7527] syzkaller1: linktype set to 804 [ 139.400008][ T5968] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.429325][ T5968] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.443531][ T5968] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.455652][ T5968] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.541522][ T7556] __nla_validate_parse: 4 callbacks suppressed [ 139.541544][ T7556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.691'. [ 139.681037][ T7561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.694'. [ 139.885572][ T7573] pimreg: tun_chr_ioctl cmd 2147767506 [ 139.894104][ T7575] openvswitch: netlink: IP tunnel TTL not specified. [ 140.167226][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.201929][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.384650][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.438132][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.784397][ T7609] vxcan3: entered allmulticast mode [ 140.842582][ T7615] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.851674][ T7615] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.922464][ T7615] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 141.274642][ T7629] sctp: [Deprecated]: syz.0.723 (pid 7629) Use of int in maxseg socket option. [ 141.274642][ T7629] Use struct sctp_assoc_value instead [ 142.303187][ T7679] netlink: 27 bytes leftover after parsing attributes in process `syz.3.748'. [ 142.935139][ T7712] netlink: 76 bytes leftover after parsing attributes in process `syz.0.762'. [ 143.579798][ T7739] netlink: 724 bytes leftover after parsing attributes in process `syz.4.776'. [ 143.602735][ T7739] netlink: 83 bytes leftover after parsing attributes in process `syz.4.776'. [ 144.179500][ T30] audit: type=1800 audit(1756522827.732:2): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.791" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=870 res=0 errno=0 [ 144.406718][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.414939][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.468467][ T7780] netlink: 'syz.4.796': attribute type 2 has an invalid length. [ 144.481741][ T7780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.796'. [ 144.491550][ T7780] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 144.692628][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 144.993795][ T7793] team0 (unregistering): Port device team_slave_0 removed [ 145.022111][ T7793] team0 (unregistering): Port device team_slave_1 removed [ 145.224433][ T7815] Bluetooth: MGMT ver 1.23 [ 146.758277][ T7874] netlink: 48 bytes leftover after parsing attributes in process `syz.0.837'. [ 146.949572][ T7885] netlink: 'syz.4.841': attribute type 1 has an invalid length. [ 147.909870][ T7930] netlink: 'syz.2.863': attribute type 11 has an invalid length. [ 147.932155][ T7930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.863'. [ 148.411281][ T7957] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.546828][ T7966] vlan1: entered allmulticast mode [ 148.573539][ T7966] veth0_vlan: entered allmulticast mode [ 149.677161][ T8010] block nbd1: server does not support multiple connections per device. [ 149.701933][ T8010] block nbd1: shutting down sockets [ 151.512273][ T8104] openvswitch: netlink: Multiple metadata blocks provided [ 151.859529][ T8121] sctp: [Deprecated]: syz.2.954 (pid 8121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.859529][ T8121] Use struct sctp_sack_info instead [ 151.907036][ T8123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.204971][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 153.328994][ T8187] netlink: 136 bytes leftover after parsing attributes in process `syz.1.983'. [ 153.384390][ T8187] netlink: 180 bytes leftover after parsing attributes in process `syz.1.983'. [ 154.329875][ T8231] tap0: tun_chr_ioctl cmd 1074025677 [ 154.381952][ T8231] tap0: linktype set to 774 [ 154.955963][ T30] audit: type=1804 audit(1756522838.512:3): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1012" name="/newroot/219/cgroup.controllers" dev="tmpfs" ino=1127 res=1 errno=0 [ 155.039038][ T30] audit: type=1800 audit(1756522838.512:4): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1012" name="cgroup.controllers" dev="tmpfs" ino=1127 res=0 errno=0 [ 155.367345][ T8282] ipvlan2: entered promiscuous mode [ 156.185761][ T8316] pimreg: entered allmulticast mode [ 156.245204][ T8316] pimreg: left allmulticast mode [ 157.045277][ T8358] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1049'. [ 158.496889][ T8419] netlink: 'syz.4.1071': attribute type 10 has an invalid length. [ 158.504772][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1071'. [ 158.565351][ T8419] bond0: option arp_all_targets: invalid value (196616) [ 159.738509][ T8474] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1092'. [ 159.750890][ T8474] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1092'. [ 160.033847][ T5872] IPVS: starting estimator thread 0... [ 160.075167][ T8488] syz.2.1095 uses obsolete (PF_INET,SOCK_PACKET) [ 160.103210][ T8488] syzkaller1: entered promiscuous mode [ 160.128260][ T8488] syzkaller1: entered allmulticast mode [ 160.182759][ T8491] IPVS: using max 26 ests per chain, 62400 per kthread [ 160.617388][ T8513] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1105'. [ 162.127311][ T8576] netlink: 'syz.4.1129': attribute type 4 has an invalid length. [ 162.283786][ T8582] sctp: [Deprecated]: syz.4.1133 (pid 8582) Use of int in max_burst socket option. [ 162.283786][ T8582] Use struct sctp_assoc_value instead [ 162.513119][ T8594] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 163.180202][ T8623] trusted_key: syz.0.1151 sent an empty control message without MSG_MORE. [ 164.652327][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 164.746811][ T8692] netlink: 'syz.2.1182': attribute type 1 has an invalid length. [ 164.803157][ T8692] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 166.760738][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 167.283127][ T8777] batadv_slave_1: entered promiscuous mode [ 167.330662][ T8776] batadv_slave_1: left promiscuous mode [ 167.403069][ T8784] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1223'. [ 167.449205][ T8779] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1223'. [ 167.699952][ T30] audit: type=1800 audit(1756522851.262:5): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1231" name=CB dev="tmpfs" ino=1347 res=0 errno=0 [ 167.998370][ T8812] netlink: 212280 bytes leftover after parsing attributes in process `syz.1.1236'. [ 168.328874][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 168.344056][ T8825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1242'. [ 168.611535][ T8833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1245'. [ 168.637682][ T8833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1245'. [ 168.656617][ T8833] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1245'. [ 170.143992][ T8904] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 171.454769][ T8970] netlink: 'syz.1.1307': attribute type 12 has an invalid length. [ 172.357101][ T9009] syzkaller1: entered promiscuous mode [ 172.377841][ T9009] syzkaller1: entered allmulticast mode [ 172.834327][ T9032] __nla_validate_parse: 1 callbacks suppressed [ 172.834349][ T9032] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1334'. [ 173.079586][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1340'. [ 173.276491][ T9053] macvlan1: entered promiscuous mode [ 173.288508][ T9053] ipvlan0: entered promiscuous mode [ 173.309049][ T9053] ipvlan0: left promiscuous mode [ 173.332240][ T9053] macvlan1: left promiscuous mode [ 173.436916][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1347'. [ 173.483774][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1347'. [ 174.255672][ T9104] sctp: [Deprecated]: syz.2.1367 (pid 9104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.255672][ T9104] Use struct sctp_sack_info instead [ 174.724647][ T9114] syzkaller1: entered promiscuous mode [ 174.735237][ T9114] syzkaller1: entered allmulticast mode [ 174.929474][ T979] IPVS: starting estimator thread 0... [ 174.935931][ T9125] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 175.025151][ T9129] IPVS: using max 23 ests per chain, 55200 per kthread [ 175.258140][ T9143] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.1385'. [ 175.294501][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1386'. [ 176.595676][ T9201] Bluetooth: MGMT ver 1.23 [ 177.127800][ T9221] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1420'. [ 178.710003][ T9288] Bluetooth: MGMT ver 1.23 [ 179.124965][ T9302] netlink: 566 bytes leftover after parsing attributes in process `syz.3.1456'. [ 180.410933][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1478'. [ 180.682888][ T9363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1484'. [ 181.016070][ T9374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1490'. [ 181.082821][ T9377] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 181.092296][ T9377] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1492'. [ 181.130606][ T9377] netlink: 105 bytes leftover after parsing attributes in process `syz.2.1492'. [ 181.396861][ T9392] syzkaller1: entered promiscuous mode [ 181.512756][ T9392] syzkaller1: entered allmulticast mode [ 183.514111][ T9455] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1528'. [ 185.175387][ T9492] syzkaller1: entered promiscuous mode [ 185.196918][ T9492] syzkaller1: entered allmulticast mode [ 185.217949][ T9492] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 185.358827][ T9494] netlink: 'syz.4.1544': attribute type 2 has an invalid length. [ 187.639208][ T9556] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1566'. [ 187.653721][ T9558] pim6reg: entered allmulticast mode [ 187.682853][ T9558] pim6reg: left allmulticast mode [ 187.972307][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1570'. [ 188.057748][ T9380] Set syz1 is full, maxelem 65536 reached [ 188.240611][ T9578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.358329][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 188.635466][ T9598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1583'. [ 188.999839][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1592'. [ 189.061311][ T9620] netlink: 'syz.1.1593': attribute type 12 has an invalid length. [ 189.108746][ T9620] netlink: 'syz.1.1593': attribute type 29 has an invalid length. [ 189.138440][ T9620] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1593'. [ 189.170404][ T9620] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1593'. [ 189.190383][ T9623] netlink: 'syz.1.1593': attribute type 12 has an invalid length. [ 189.204615][ T9623] netlink: 'syz.1.1593': attribute type 29 has an invalid length. [ 189.234168][ T9623] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1593'. [ 189.259972][ T9623] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1593'. [ 189.480605][ T9639] netlink: 'syz.4.1602': attribute type 39 has an invalid length. [ 190.172490][ T9658] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.364082][ T9674] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 190.543147][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 191.290158][ T9726] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.297642][ T5872] IPVS: starting estimator thread 0... [ 191.385631][ T9728] IPVS: using max 27 ests per chain, 64800 per kthread [ 191.693063][ T9740] netlink: 'syz.2.1640': attribute type 4 has an invalid length. [ 192.514264][ T9772] syzkaller1: entered promiscuous mode [ 192.542613][ T9772] syzkaller1: entered allmulticast mode [ 193.075200][ T9803] __nla_validate_parse: 2 callbacks suppressed [ 193.075225][ T9803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1669'. [ 193.295763][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1674'. [ 193.336254][ T9813] gtp1: entered promiscuous mode [ 193.345162][ T9813] gtp1: entered allmulticast mode [ 194.754418][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.957565][ T9889] unknown channel width for channel at 909000KHz? [ 195.137586][ T9902] sctp: [Deprecated]: syz.4.1714 (pid 9902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.137586][ T9902] Use struct sctp_sack_info instead [ 198.582993][T10017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1765'. [ 199.604318][T10036] smc: net device bond0 applied user defined pnetid SYZ2 [ 199.953102][T10050] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1780'. [ 201.215273][T10100] syzkaller1: entered promiscuous mode [ 201.230292][T10100] syzkaller1: entered allmulticast mode [ 201.322520][T10109] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1808'. [ 201.472086][T10115] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 201.567996][T10117] netlink: 'syz.2.1812': attribute type 2 has an invalid length. [ 202.792054][T10170] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.825447][T10170] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.000088][T10170] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.015400][T10170] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.142888][T10183] sctp: [Deprecated]: syz.0.1840 (pid 10183) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.142888][T10183] Use struct sctp_sack_info instead [ 203.234818][T10170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.271955][T10170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.412845][T10170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.445150][T10170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.643768][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.660112][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.702064][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.711845][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.735688][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1848'. [ 203.762833][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.771431][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.971599][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.995792][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.039416][T10205] bridge_slave_0: left allmulticast mode [ 204.059113][T10205] bridge_slave_0: left promiscuous mode [ 204.077211][T10205] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.120106][T10205] bridge_slave_1: left allmulticast mode [ 204.138365][T10205] bridge_slave_1: left promiscuous mode [ 204.175961][T10205] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.256347][T10205] bond0: (slave bond_slave_0): Releasing backup interface [ 204.298382][T10205] bond0: (slave bond_slave_1): Releasing backup interface [ 204.390449][T10205] team0: Port device team_slave_0 removed [ 204.417241][T10205] team0: Port device team_slave_1 removed [ 204.436476][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.451437][T10205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.473057][T10205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.498771][T10205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.764605][T10232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1862'. [ 205.089010][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 205.121360][T10244] netlink: 'syz.3.1868': attribute type 1 has an invalid length. [ 205.138418][T10244] netlink: 'syz.3.1868': attribute type 2 has an invalid length. [ 205.360682][T10253] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1872'. [ 205.478749][T10257] batadv_slave_1: entered promiscuous mode [ 205.496832][T10256] batadv_slave_1: left promiscuous mode [ 205.577439][T10259] batadv_slave_0: entered promiscuous mode [ 205.613466][T10258] batadv_slave_0: left promiscuous mode [ 206.064088][T10276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.145341][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 206.158691][T10276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.211074][T10280] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 206.226368][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 206.384029][T10286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1888'. [ 206.410522][T10286] netlink: 'syz.3.1888': attribute type 32 has an invalid length. [ 206.420661][T10286] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 206.729583][T10300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.513562][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1907'. [ 208.193803][T10343] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1915'. [ 208.255973][T10346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1917'. [ 208.847201][ T5987] IPVS: starting estimator thread 0... [ 208.937721][T10382] netlink: 'syz.2.1932': attribute type 11 has an invalid length. [ 208.945950][T10377] IPVS: using max 23 ests per chain, 55200 per kthread [ 209.131767][T10389] nbd: device at index 4 is going down [ 210.095451][T10438] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 210.391150][T10440] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 210.597157][T10449] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 211.448796][T10478] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 211.479790][T10478] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1974'. [ 211.745519][T10488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1978'. [ 211.779463][T10488] netlink: 'syz.4.1978': attribute type 7 has an invalid length. [ 211.804759][T10488] netlink: 'syz.4.1978': attribute type 8 has an invalid length. [ 211.825087][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 212.074830][T10500] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 213.146600][T10543] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2000'. [ 213.174051][T10543] 0ªX¹¦À: renamed from caif0 [ 213.216764][T10543] 0ªX¹¦À: entered allmulticast mode [ 213.225429][T10543] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 213.616823][T10560] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 213.693352][T10560] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 215.882341][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 215.914941][T10624] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 215.937957][T10624] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7) [ 216.263174][T10639] batadv_slave_0: entered promiscuous mode [ 216.283168][T10638] batadv_slave_0: left promiscuous mode [ 216.376362][T10644] netlink: 'syz.3.2043': attribute type 4 has an invalid length. [ 216.903379][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 216.935087][T10663] netlink: 'syz.2.2051': attribute type 30 has an invalid length. [ 217.029225][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 217.038814][T10663] netlink: 'syz.2.2051': attribute type 30 has an invalid length. [ 217.231705][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'. [ 217.626511][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2070'. [ 217.769608][T10708] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2073'. [ 218.498922][T10736] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 218.514774][T10736] macvlan2: entered allmulticast mode [ 218.521133][T10736] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 218.555171][T10742] netlink: 'syz.3.2090': attribute type 29 has an invalid length. [ 218.641755][T10742] netlink: 'syz.3.2090': attribute type 29 has an invalid length. [ 218.664182][T10742] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2090'. [ 218.681447][T10742] unsupported nla_type 58 [ 218.716329][T10749] netlink: 'syz.4.2092': attribute type 64 has an invalid length. [ 218.967336][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2098'. [ 219.028574][T10761] netlink: 'syz.0.2097': attribute type 11 has an invalid length. [ 219.409719][T10781] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2107'. [ 219.634082][T10795] veth0_vlan: entered allmulticast mode [ 219.874871][T10807] bond0: entered promiscuous mode [ 219.889631][T10807] batadv0: entered promiscuous mode [ 219.898860][T10807] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 219.911334][T10807] hsr1: entered allmulticast mode [ 219.919995][T10807] bond0: entered allmulticast mode [ 219.929131][T10807] batadv0: entered allmulticast mode [ 219.940270][T10807] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 220.054641][T10811] geneve2: entered promiscuous mode [ 221.903706][ T5879] IPVS: starting estimator thread 0... [ 222.005363][T10884] IPVS: using max 23 ests per chain, 55200 per kthread [ 222.546385][T10895] block nbd1: server does not support multiple connections per device. [ 222.566249][T10895] block nbd1: shutting down sockets [ 222.601121][T10901] netlink: 'syz.1.2161': attribute type 29 has an invalid length. [ 222.668545][T10901] netlink: 'syz.1.2161': attribute type 29 has an invalid length. [ 222.692807][T10901] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2161'. [ 223.153788][T10920] nbd: device at index 1 is going down [ 223.283215][T10926] netlink: 'syz.3.2170': attribute type 4 has an invalid length. [ 223.832184][T10954] batadv_slave_0: entered promiscuous mode [ 223.860896][T10954] batadv_slave_0: left promiscuous mode [ 223.931484][T10958] lo: entered allmulticast mode [ 223.970693][T10958] lo: left allmulticast mode [ 223.986933][T10960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2185'. [ 224.257924][T10972] bridge_slave_0: left allmulticast mode [ 224.274763][T10972] bridge_slave_0: left promiscuous mode [ 224.283344][T10972] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.318819][T10972] bridge_slave_1: left allmulticast mode [ 224.345535][T10972] bridge_slave_1: left promiscuous mode [ 224.351613][T10972] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.390044][T10972] bond0: (slave bond_slave_0): Releasing backup interface [ 224.411676][T10972] bond0: (slave bond_slave_1): Releasing backup interface [ 224.482525][T10972] team0: Port device C removed [ 224.533755][T10972] team0: Port device team_slave_1 removed [ 224.563539][T10972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.592848][T10972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.769543][T10987] syzkaller1: entered promiscuous mode [ 224.778351][T10987] syzkaller1: entered allmulticast mode [ 225.120844][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2208'. [ 226.017484][T11046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.838798][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2248'. [ 229.411416][T11175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.159219][T11208] geneve2: entered promiscuous mode [ 230.164587][T11208] geneve2: entered allmulticast mode [ 230.639517][T11226] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.502244][T11252] netlink: 'syz.3.2306': attribute type 2 has an invalid length. [ 232.283891][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2318'. [ 232.394515][T11284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2319'. [ 232.748284][T11297] bridge0: port 3(syz_tun) entered blocking state [ 232.793309][T11297] bridge0: port 3(syz_tun) entered disabled state [ 232.814534][T11297] syz_tun: entered allmulticast mode [ 232.848308][T11297] syz_tun: entered promiscuous mode [ 232.876163][T11297] bridge0: port 3(syz_tun) entered blocking state [ 232.883164][T11297] bridge0: port 3(syz_tun) entered forwarding state [ 234.417451][T11369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2357'. [ 234.457646][T11369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2357'. [ 235.473108][T11410] bridge0: port 3(syz_tun) entered blocking state [ 235.496620][T11410] bridge0: port 3(syz_tun) entered disabled state [ 235.503571][T11410] syz_tun: entered allmulticast mode [ 235.521969][T11410] syz_tun: entered promiscuous mode [ 235.749588][T11423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2381'. [ 235.820970][T11423] macvlan1: entered promiscuous mode [ 235.853734][T11423] macvlan1: left promiscuous mode [ 236.391545][T11444] bridge0: port 1(syz_tun) entered blocking state [ 236.409481][T11444] bridge0: port 1(syz_tun) entered disabled state [ 236.418922][T11444] syz_tun: entered allmulticast mode [ 236.430875][T11444] syz_tun: entered promiscuous mode [ 236.692023][T11454] netlink: 'syz.3.2397': attribute type 1 has an invalid length. [ 237.282748][T11483] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.2411'. [ 237.490010][T11499] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2418'. [ 237.554214][T11502] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2419'. [ 237.825212][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2425'. [ 237.987359][T11529] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2430'. [ 239.526041][T11581] syz.3.2453 (11581) used obsolete PPPIOCDETACH ioctl [ 240.158161][T11615] pim6reg1: entered promiscuous mode [ 240.163612][T11615] pim6reg1: entered allmulticast mode [ 240.689948][T11644] ip6gretap0: entered promiscuous mode [ 240.706206][T11644] macsec2: entered promiscuous mode [ 240.711668][T11644] macsec2: entered allmulticast mode [ 240.734203][T11644] ip6gretap0: entered allmulticast mode [ 241.150595][T11673] netlink: 'syz.1.2493': attribute type 8 has an invalid length. [ 241.174128][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2493'. [ 241.207051][T11673] bond0: entered promiscuous mode [ 241.212576][T11673] bond_slave_0: entered promiscuous mode [ 241.219082][T11673] bond_slave_1: entered promiscuous mode [ 241.230690][T11673] bond0: left promiscuous mode [ 241.236317][T11673] bond_slave_0: left promiscuous mode [ 241.249744][T11673] bond_slave_1: left promiscuous mode [ 241.646432][T11688] block nbd2: server does not support multiple connections per device. [ 241.685357][T11688] block nbd2: shutting down sockets [ 242.478119][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2515'. [ 243.132324][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 243.148361][T11750] tun0: tun_chr_ioctl cmd 1074025675 [ 243.154033][T11750] tun0: persist enabled [ 243.177818][T11754] tun0: tun_chr_ioctl cmd 1074025675 [ 243.183455][T11754] tun0: persist disabled [ 243.550066][T11769] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.320891][T11806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2551'. [ 244.368836][T11806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2551'. [ 246.311878][T11887] sit0: entered promiscuous mode [ 246.322534][T11887] netlink: 'syz.2.2586': attribute type 1 has an invalid length. [ 246.334932][T11887] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2586'. [ 246.469987][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2589'. [ 246.491828][T11894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2589'. [ 247.307933][T11927] tipc: Started in network mode [ 247.330580][T11927] tipc: Node identity ac1414aa, cluster identity 4711 [ 247.350047][T11927] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.357684][T11927] tipc: Enabled bearer , priority 10 [ 247.357798][T11929] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2607'. [ 247.486556][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.553466][T11939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2611'. [ 247.635254][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.775072][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.915168][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.055167][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.192824][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2620'. [ 248.202425][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.335246][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.476178][ T5986] tipc: Node number set to 2886997162 [ 248.615283][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.885224][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.415629][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.802371][T12036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2656'. [ 249.848364][T12036] netlink: 'syz.2.2656': attribute type 21 has an invalid length. [ 249.894625][T12039] netlink: 'syz.1.2657': attribute type 12 has an invalid length. [ 249.903653][T12039] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2657'. [ 250.123062][T12053] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2663'. [ 250.425335][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.539227][T12073] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 251.465190][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.362666][T12144] macvtap1: entered allmulticast mode [ 252.371049][T12144] veth0_macvtap: entered allmulticast mode [ 252.505244][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.785206][ T30] audit: type=1804 audit(1756522936.342:6): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2712" name="memory.events" dev="tmpfs" ino=2585 res=1 errno=0 [ 252.863301][ T30] audit: type=1800 audit(1756522936.342:7): pid=12161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2712" name="memory.events" dev="tmpfs" ino=2585 res=0 errno=0 [ 253.498856][T12201] nbd: device at index 2 is going down [ 253.545235][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.617263][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2732'. [ 253.647747][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'. [ 254.186337][T12230] netlink: 'syz.3.2743': attribute type 10 has an invalid length. [ 254.204633][T12230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2743'. [ 254.232202][T12230] dummy0: entered promiscuous mode [ 254.239151][T12230] dummy0: entered allmulticast mode [ 254.247647][T12230] bridge0: port 1(dummy0) entered blocking state [ 254.254490][T12230] bridge0: port 1(dummy0) entered disabled state [ 254.269786][T12230] bridge0: port 1(dummy0) entered blocking state [ 254.276504][T12230] bridge0: port 1(dummy0) entered forwarding state [ 254.289864][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054a1c800: rx timeout, send abort [ 254.585260][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.775534][T12254] sit0: entered promiscuous mode [ 254.799367][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054a1c800: abort rx timeout. Force session deactivation [ 254.807294][T12254] netlink: 'syz.1.2750': attribute type 1 has an invalid length. [ 254.859227][T12254] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2750'. [ 254.909593][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2751'. [ 255.258054][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 255.271822][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2756'. [ 255.292394][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 255.323602][T12271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2756'. [ 255.531843][T12290] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2765'. [ 255.625251][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.661040][T12335] pim6reg: entered allmulticast mode [ 256.667417][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.677608][T12339] pim6reg: left allmulticast mode [ 257.321725][T12361] netlink: 'syz.0.2796': attribute type 6 has an invalid length. [ 257.705127][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.745228][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.792156][T12435] __nla_validate_parse: 1 callbacks suppressed [ 258.792180][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2826'. [ 259.789422][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.433642][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2842'. [ 260.446754][T12473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2842'. [ 260.825148][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.912483][T12473] bridge0: port 4(vlan2) entered blocking state [ 260.937648][T12473] bridge0: port 4(vlan2) entered disabled state [ 260.944625][T12473] vlan2: entered allmulticast mode [ 260.958561][T12473] bridge0: entered allmulticast mode [ 260.987056][T12473] vlan2: left allmulticast mode [ 260.992226][T12473] bridge0: left allmulticast mode [ 261.133031][T12483] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2847'. [ 261.241687][T12485] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2849'. [ 261.553061][T12506] netlink: 'syz.1.2856': attribute type 1 has an invalid length. [ 261.564585][T12506] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2856'. [ 261.737787][T12513] pimreg: entered allmulticast mode [ 261.773532][T12513] dvmrp8: entered allmulticast mode [ 261.806856][T12513] pimreg: left allmulticast mode [ 261.815151][T12513] dvmrp8: left allmulticast mode [ 261.851158][T12521] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2864'. [ 261.865269][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 261.929702][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 262.905236][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.072360][T12568] netlink: 'syz.3.2882': attribute type 1 has an invalid length. [ 263.086867][T12568] netlink: 'syz.3.2882': attribute type 4 has an invalid length. [ 263.101599][T12568] netlink: 15538 bytes leftover after parsing attributes in process `syz.3.2882'. [ 263.130647][T12570] netlink: 'syz.4.2883': attribute type 4 has an invalid length. [ 263.199288][T12570] netlink: 'syz.4.2883': attribute type 4 has an invalid length. [ 263.929772][T12586] syzkaller1: entered promiscuous mode [ 263.945129][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 263.952772][T12586] syzkaller1: entered allmulticast mode [ 264.049687][T12599] netlink: 'syz.2.2896': attribute type 1 has an invalid length. [ 264.146610][T12605] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 264.165163][T12605] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 264.178623][T12605] bond2: (slave vti0): making interface the new active one [ 264.188176][T12605] bond2: (slave vti0): Enslaving as an active interface with an up link [ 264.565835][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2908'. [ 264.733386][T12636] openvswitch: netlink: IPv4 tun info is not correct [ 264.985649][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 265.234268][T12663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2925'. [ 265.986307][T12700] netlink: 'syz.0.2942': attribute type 21 has an invalid length. [ 266.010688][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 266.025421][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 266.032787][T12700] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2942'. [ 266.558467][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2955'. [ 267.065245][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 268.105229][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.145140][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 269.271995][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2988'. [ 269.850712][T12836] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.3001'. [ 270.205138][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 270.868048][T12867] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3014'. [ 270.918648][T12867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3014'. [ 271.140116][T12877] pimreg: entered allmulticast mode [ 271.225090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 271.229095][T12884] dvmrp8: entered allmulticast mode [ 271.265393][T12877] pimreg: left allmulticast mode [ 271.293611][T12877] dvmrp8: left allmulticast mode [ 271.695613][T12893] netlink: 'syz.3.3025': attribute type 1 has an invalid length. [ 271.755166][T12893] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3025'. [ 271.815075][T12893] netlink: 'syz.3.3025': attribute type 2 has an invalid length. [ 271.875888][T12893] netlink: 'syz.3.3025': attribute type 1 has an invalid length. [ 272.265104][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.452731][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3037'. [ 273.305107][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.781747][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3052'. [ 273.825593][T12962] chnl_net:caif_netlink_parms(): no params data found [ 274.098688][T12968] netlink: 'syz.4.3054': attribute type 1 has an invalid length. [ 274.232608][T12968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.255854][T12970] bond1: (slave geneve0): making interface the new active one [ 274.327010][T12970] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 274.345142][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.600451][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'. [ 274.642078][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'. [ 274.723042][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3057'. [ 274.752368][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'. [ 275.385180][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.133668][T12755] Set syz1 is full, maxelem 65536 reached [ 276.425259][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.664132][T13037] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3081'. [ 276.723238][T13041] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.3082'. [ 276.927159][T13049] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 276.930001][T13044] IPVS: stopping master sync thread 13049 ... [ 276.948982][T13048] Bluetooth: MGMT ver 1.23 [ 277.247939][T13064] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3093'. [ 277.465202][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.474922][T13076] netlink: 'syz.2.3099': attribute type 16 has an invalid length. [ 277.486341][T13076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3099'. [ 278.037074][T13099] netlink: 'syz.3.3109': attribute type 29 has an invalid length. [ 278.058063][T13099] netlink: 'syz.3.3109': attribute type 29 has an invalid length. [ 278.505088][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.566570][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3116'. [ 278.633013][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3116'. [ 279.081572][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 279.125145][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 279.149540][T13134] netlink: 'syz.1.3123': attribute type 15 has an invalid length. [ 279.209844][T13134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 279.258796][T13134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 279.355196][T13134] netlink: 'syz.1.3123': attribute type 15 has an invalid length. [ 279.545283][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 279.906927][T13171] netlink: 'syz.4.3127': attribute type 7 has an invalid length. [ 280.065113][T13180] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 280.073235][T13180] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 280.081286][T13180] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 280.089390][T13180] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 280.585109][ C0] net_ratelimit: 50 callbacks suppressed [ 280.585139][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.270916][T13239] pim6reg: entered allmulticast mode [ 281.328194][T13239] pim6reg: left allmulticast mode [ 281.625176][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.291849][T13278] __nla_validate_parse: 5 callbacks suppressed [ 282.291864][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3171'. [ 282.665176][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.877926][T13294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.014091][T13294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.219513][T13294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.263753][T13306] ip6gre1: entered allmulticast mode [ 283.429386][T13294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.705099][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.714087][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 283.746860][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3194'. [ 283.780185][T13330] netlink: 'syz.1.3194': attribute type 20 has an invalid length. [ 283.824919][T13158] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.825606][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3194'. [ 283.848592][T13151] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.885240][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3194'. [ 283.894388][T13330] netlink: 'syz.1.3194': attribute type 20 has an invalid length. [ 283.976191][T13151] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.984757][T13151] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.745144][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.878388][T13378] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3214'. [ 285.158605][T13384] netlink: 'syz.3.3216': attribute type 39 has an invalid length. [ 285.785091][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.831068][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3235'. [ 286.029350][T13428] syzkaller1: entered promiscuous mode [ 286.037288][T13428] syzkaller1: entered allmulticast mode [ 286.179426][T13437] ip6gre1: entered allmulticast mode [ 286.428032][T13450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3246'. [ 286.825293][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.088671][T13484] netlink: 428 bytes leftover after parsing attributes in process `syz.0.3262'. [ 287.134169][T13484] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3262'. [ 287.607371][T13505] netlink: 'syz.1.3270': attribute type 5 has an invalid length. [ 287.616409][T13502] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3269'. [ 287.865273][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.671133][T13547] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3288'. [ 288.905149][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.352191][T13585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3307'. [ 289.587873][T13601] macsec3: entered promiscuous mode [ 289.593142][T13601] team0: entered promiscuous mode [ 289.945090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.367439][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3324'. [ 290.442440][T13635] netlink: 'syz.2.3326': attribute type 2 has an invalid length. [ 290.461274][T13635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3326'. [ 290.986294][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.292155][T13656] pim6reg1: entered promiscuous mode [ 291.312448][T13656] pim6reg1: entered allmulticast mode [ 291.846381][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3348'. [ 291.893474][T13692] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3350'. [ 291.967289][T13697] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.3352'. [ 291.987068][T13697] openvswitch: netlink: Message has 4 unknown bytes. [ 292.025441][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.384344][T13718] netlink: 'syz.0.3362': attribute type 10 has an invalid length. [ 292.462941][T13718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.470603][T13720] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 292.521857][T13718] team0: Port device bond0 added [ 292.534058][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3364'. [ 292.564656][T13726] netlink: 'syz.3.3365': attribute type 30 has an invalid length. [ 292.791496][T13730] macvtap2: entered allmulticast mode [ 292.801870][T13730] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 292.817469][T13730] batman_adv: batadv0: Adding interface: macvtap2 [ 292.825352][T13730] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.862837][T13730] batman_adv: batadv0: Interface activated: macvtap2 [ 293.065235][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.626708][T13774] netlink: 'syz.1.3388': attribute type 8 has an invalid length. [ 293.634677][T13774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3388'. [ 293.671672][T13774] bond0: entered promiscuous mode [ 293.701641][T13774] bond_slave_0: entered promiscuous mode [ 293.724014][T13774] bond_slave_1: entered promiscuous mode [ 293.781805][T13774] bond0: left promiscuous mode [ 293.793678][T13774] bond_slave_0: left promiscuous mode [ 293.802938][T13774] bond_slave_1: left promiscuous mode [ 294.105200][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.971595][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3402'. [ 295.145019][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.185077][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.355373][T13856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3422'. [ 296.975502][T13877] pim6reg1: entered promiscuous mode [ 296.993153][T13877] pim6reg1: entered allmulticast mode [ 297.225030][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.378552][T13895] 8021q: adding VLAN 0 to HW filter on device bond2 [ 297.398245][T13895] bridge0: port 2(bond2) entered blocking state [ 297.406927][T13895] bridge0: port 2(bond2) entered disabled state [ 297.413517][T13895] bond2: entered allmulticast mode [ 297.422186][T13895] bond2: entered promiscuous mode [ 298.179086][T13916] netlink: 'syz.1.3446': attribute type 9 has an invalid length. [ 298.198233][T13916] netlink: 212160 bytes leftover after parsing attributes in process `syz.1.3446'. [ 298.265014][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.305159][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.326736][T13957] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3463'. [ 299.358104][T13957] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3463'. [ 299.380335][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3466'. [ 299.574320][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3467'. [ 300.118400][T13986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3477'. [ 300.345126][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.463476][T13991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.525500][T13991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.709977][T13991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.724262][T13991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.813071][T13991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.826746][T13991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.955603][T13991] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 301.107083][T13991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.142738][T13991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.385018][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.449061][T13166] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.480099][T13166] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.509065][T13166] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.535302][T13166] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.571320][T13158] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.584259][T13158] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.636966][T13158] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.663446][T13158] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.425050][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 303.465063][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.505092][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.943172][T14048] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.157117][T14048] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.317469][T14048] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.428445][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3510'. [ 305.468872][T14048] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.545025][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.638804][T14077] netlink: 'syz.4.3512': attribute type 27 has an invalid length. [ 305.666487][T14077] bridge0: port 1(syz_tun) entered blocking state [ 305.673224][T14077] bridge0: port 1(syz_tun) entered forwarding state [ 305.693277][T14077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.825310][ T1161] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.867060][ T1161] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.093758][T13153] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.103040][T14094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3518'. [ 306.214183][T13153] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.585019][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.625051][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.987999][T14163] netlink: 'syz.2.3544': attribute type 10 has an invalid length. [ 308.070188][T14169] netlink: 'syz.2.3544': attribute type 10 has an invalid length. [ 308.141146][T14169] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 308.665268][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.969413][T14195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3559'. [ 308.985712][T14200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3560'. [ 309.006254][T14200] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3560'. [ 309.105866][T14200] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 309.427191][T14209] raw_sendmsg: syz.2.3563 forgot to set AF_INET. Fix it! [ 309.495067][T14211] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 309.705015][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.745023][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.792522][T14262] syzkaller1: entered promiscuous mode [ 310.803921][T14262] syzkaller1: entered allmulticast mode [ 311.463979][T14288] netlink: 'syz.0.3599': attribute type 4 has an invalid length. [ 311.641118][T14297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3604'. [ 311.672104][T14297] veth1_macvtap: left promiscuous mode [ 311.785157][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.416465][T14327] netlink: 'syz.0.3614': attribute type 4 has an invalid length. [ 312.426532][T14327] netlink: 'syz.0.3614': attribute type 4 has an invalid length. [ 312.580159][T14329] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3615'. [ 312.632327][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3615'. [ 312.825129][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.496544][T14364] netlink: 'syz.2.3628': attribute type 1 has an invalid length. [ 313.865175][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.250256][T13158] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 314.385862][T14387] syzkaller1: entered promiscuous mode [ 314.391829][T14387] syzkaller1: entered allmulticast mode [ 314.427198][T14396] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3640'. [ 314.741564][T14407] netlink: 'syz.1.3643': attribute type 1 has an invalid length. [ 314.809888][T14407] netlink: 'syz.1.3643': attribute type 2 has an invalid length. [ 314.869487][T14412] netlink: 'syz.1.3643': attribute type 1 has an invalid length. [ 314.896142][T14412] netlink: 'syz.1.3643': attribute type 2 has an invalid length. [ 314.905175][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.258840][T14435] batadv_slave_1: entered promiscuous mode [ 315.287924][T14433] batadv_slave_1: left promiscuous mode [ 315.508865][T14449] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.3662'. [ 315.743713][T14460] macvtap1: entered promiscuous mode [ 315.749595][T14460] macvtap1: entered allmulticast mode [ 315.758084][T14460] syz_tun: entered promiscuous mode [ 315.763609][T14460] syz_tun: entered allmulticast mode [ 315.781354][T14460] team0: Device macvtap1 failed to register rx_handler [ 315.793109][T14460] syz_tun: left allmulticast mode [ 315.799413][T14460] syz_tun: left promiscuous mode [ 315.945165][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.957674][T14521] netlink: 'syz.0.3688': attribute type 1 has an invalid length. [ 316.985338][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.154151][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055325000: rx timeout, send abort [ 317.382876][T14521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.662736][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055325000: abort rx timeout. Force session deactivation [ 317.942672][T14568] netlink: 'syz.2.3705': attribute type 1 has an invalid length. [ 317.971886][T14568] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.3705'. [ 318.025030][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.251739][T14579] pimreg: entered allmulticast mode [ 318.289614][T14584] pimreg: left allmulticast mode [ 318.585182][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 318.977894][ T30] audit: type=1800 audit(1756523002.542:8): pid=14611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3720" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=3621 res=0 errno=0 [ 319.065012][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 319.192466][T14614] bridge0: port 3(syz_tun) entered disabled state [ 319.218784][T14614] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.227101][T14614] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.256966][T14618] nbd: socks must be embedded in a SOCK_ITEM attr [ 319.271170][T14618] block nbd3: shutting down sockets [ 319.557356][T14614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.628720][T14614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.833089][T14614] ip6gretap0: left allmulticast mode [ 320.078969][ T1140] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.094146][ T1140] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.105304][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 320.141342][ T1140] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.156444][ T1140] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.621716][T14669] netlink: 'syz.2.3737': attribute type 13 has an invalid length. [ 320.819034][T14669] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.827978][T14669] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.087199][T14669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.136759][T14669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.145052][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 321.977653][T13158] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.005523][T13158] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.040814][T13158] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.072987][T13158] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.102801][T13158] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.133818][T13158] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.185015][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 322.212128][T13158] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.432778][T13158] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.948708][T14730] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3754'. [ 323.024449][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3745'. [ 323.038205][T14698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3745'. [ 323.052407][T14730] gretap0: entered promiscuous mode [ 323.225025][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 323.625893][T14751] veth1: entered allmulticast mode [ 323.819027][T14763] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3767'. [ 324.025413][T14767] syzkaller1: entered promiscuous mode [ 324.035237][T14767] syzkaller1: entered allmulticast mode [ 324.042387][T14769] unknown channel width for channel at 909000KHz? [ 324.059749][T14769] unknown channel width for channel at 909000KHz? [ 324.067123][T14769] unknown channel width for channel at 909000KHz? [ 324.127653][T14774] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.3771'. [ 324.265129][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 324.553685][T14787] "syz.3.3777" (14787) uses obsolete ecb(arc4) skcipher [ 324.660473][T14802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3782'. [ 324.702274][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3782'. [ 324.730703][ T59] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.731062][T14802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3782'. [ 324.744099][T14807] netlink: 'syz.4.3784': attribute type 13 has an invalid length. [ 324.748623][T14802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3782'. [ 324.772381][ T59] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.940959][T14807] bridge0: port 1(syz_tun) entered disabled state [ 325.305247][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 325.680478][T14807] veth0_macvtap: left allmulticast mode [ 325.785923][T14807] batman_adv: batadv0: Interface deactivated: macvtap2 [ 325.800797][T14807] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 325.839375][ T59] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.851353][ T59] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.862785][ T59] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.877984][ T59] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.889116][ T59] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.903255][ T59] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.151588][ T59] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.182182][ T59] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.194394][ T59] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.222975][ T59] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.345044][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 326.463894][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3799'. [ 326.488885][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3799'. [ 327.385150][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 327.415471][T14887] bond2: entered promiscuous mode [ 327.454215][T14887] bond2: entered allmulticast mode [ 327.484876][T14892] geneve2: entered promiscuous mode [ 327.499345][T14892] geneve2: entered allmulticast mode [ 327.505514][T14892] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 327.514379][ T1161] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.552217][ T1161] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.582206][ T1161] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.618738][ T1161] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.667846][T14896] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 327.688370][T14898] netlink: 'syz.0.3821': attribute type 21 has an invalid length. [ 327.716313][T14898] netlink: 'syz.0.3821': attribute type 21 has an invalid length. [ 327.770425][T14900] netlink: 'syz.2.3822': attribute type 21 has an invalid length. [ 327.804860][T14900] netlink: 'syz.2.3822': attribute type 22 has an invalid length. [ 327.827068][T14900] netlink: 'syz.2.3822': attribute type 23 has an invalid length. [ 327.841224][T14900] netlink: 'syz.2.3822': attribute type 25 has an invalid length. [ 327.849467][T14900] netlink: 'syz.2.3822': attribute type 26 has an invalid length. [ 328.425006][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 328.913430][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024fd8400: rx timeout, send abort [ 328.922747][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024fd8400: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 329.465025][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 329.973898][T14982] netlink: 'syz.3.3861': attribute type 1 has an invalid length. [ 330.177112][T14986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.195554][T14986] bond2: (slave bond3): making interface the new active one [ 330.208922][T14986] bond2: (slave bond3): Enslaving as an active interface with an up link [ 330.509273][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 330.989032][T15029] __nla_validate_parse: 7 callbacks suppressed [ 330.989053][T15029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3877'. [ 331.545120][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.725865][T15045] vlan0: entered promiscuous mode [ 331.777189][T15047] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3884'. [ 332.001089][T15055] tipc: Started in network mode [ 332.013053][T15055] tipc: Node identity ac14140f, cluster identity 4711 [ 332.020782][T15055] tipc: New replicast peer: 255.255.255.255 [ 332.032019][T15055] tipc: Enabled bearer , priority 10 [ 332.198433][T15063] netlink: 'syz.2.3892': attribute type 1 has an invalid length. [ 332.244212][T15063] bond3: entered promiscuous mode [ 332.250201][T15063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 332.274760][T15067] bond3: (slave bridge3): making interface the new active one [ 332.282707][T15067] bridge3: entered promiscuous mode [ 332.289678][T15067] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 332.585025][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 333.173287][ T5986] tipc: Node number set to 2886997007 [ 333.635112][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.665129][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 334.846174][T15174] netlink: 'syz.2.3939': attribute type 1 has an invalid length. [ 334.872805][T15174] netlink: 'syz.2.3939': attribute type 6 has an invalid length. [ 334.885788][T15174] netlink: 'syz.2.3939': attribute type 3 has an invalid length. [ 335.163768][T15188] vlan2: entered promiscuous mode [ 335.705211][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 335.799140][T15231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3965'. [ 336.204458][T15248] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3972'. [ 336.446806][T15264] batadv_slave_1: entered promiscuous mode [ 336.476738][T15263] batadv_slave_1: left promiscuous mode [ 336.745178][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 337.647223][T15307] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 337.795037][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 338.835005][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.865118][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 339.878398][T15411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4035'. [ 340.458155][T15435] syz_tun: entered promiscuous mode [ 340.471176][T15435] batadv_slave_0: entered promiscuous mode [ 340.480930][T15435] debugfs: 'hsr1' already exists in 'hsr' [ 340.497058][T15435] Cannot create hsr debugfs directory [ 340.503870][T15435] hsr1: entered allmulticast mode [ 340.513421][T15435] syz_tun: entered allmulticast mode [ 340.522702][T15435] batadv_slave_0: entered allmulticast mode [ 340.905123][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 341.073928][T15469] syzkaller1: entered promiscuous mode [ 341.083680][T15469] syzkaller1: entered allmulticast mode [ 341.955135][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 342.985158][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 343.207252][T15549] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 344.025055][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 344.292072][T15587] ip6tnl1: entered promiscuous mode [ 345.065131][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 345.219241][T15625] veth0_to_bridge: entered promiscuous mode [ 345.245402][T15623] veth0_to_bridge: left promiscuous mode [ 345.408257][T15634] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4131'. [ 346.104997][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 346.343048][T15682] netlink: 'syz.3.4149': attribute type 4 has an invalid length. [ 346.364831][T15682] netlink: 'syz.3.4149': attribute type 4 has an invalid length. [ 346.606416][T15696] netlink: 'syz.4.4157': attribute type 1 has an invalid length. [ 346.728612][T15696] bond3: entered promiscuous mode [ 346.765650][T15696] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.897550][T15700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 346.909788][T15700] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 346.920536][T15700] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 346.931821][T15711] netlink: 'syz.2.4163': attribute type 4 has an invalid length. [ 346.949381][T15700] bond3: (slave vxcan3): making interface the new active one [ 346.957404][T15700] vxcan3: entered promiscuous mode [ 346.983142][T15715] netlink: 'syz.2.4163': attribute type 4 has an invalid length. [ 346.994205][T15700] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 347.144999][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 347.782586][T15749] syzkaller1: entered promiscuous mode [ 347.794007][T15749] syzkaller1: entered allmulticast mode [ 348.133856][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4182'. [ 348.153415][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4182'. [ 348.185140][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 348.410328][T15769] vlan0: entered allmulticast mode [ 348.424472][T15769] veth1: entered allmulticast mode [ 348.434201][T15769] batman_adv: batadv0: Adding interface: vlan0 [ 348.452604][T15769] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.545135][T15769] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 349.207889][T15795] syzkaller1: entered promiscuous mode [ 349.225011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 349.227151][T15799] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4201'. [ 349.239506][T15795] syzkaller1: entered allmulticast mode [ 349.418651][T15808] vlan0: entered allmulticast mode [ 349.438383][T15808] bridge_slave_0: entered allmulticast mode [ 349.586904][T15818] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4204'. [ 350.258876][T15836] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4215'. [ 350.275161][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 350.380222][T15846] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4220'. [ 351.306111][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 351.793061][T15905] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4245'. [ 352.345207][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.385003][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 353.627086][T15950] netlink: 'syz.1.4262': attribute type 4 has an invalid length. [ 353.726719][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4267'. [ 353.736859][T15956] netlink: 'syz.1.4267': attribute type 14 has an invalid length. [ 353.746584][T15956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4267'. [ 353.756431][T15956] netlink: 'syz.1.4267': attribute type 14 has an invalid length. [ 354.425124][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.213579][T16004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4286'. [ 355.465137][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 355.741605][T15999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4285'. [ 356.244272][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'. [ 356.288860][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4300'. [ 356.505168][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 357.545125][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.587090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 358.834227][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4332'. [ 358.843863][T16124] netlink: 'syz.1.4332': attribute type 20 has an invalid length. [ 358.977347][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4332'. [ 358.993083][T16124] netlink: 'syz.1.4332': attribute type 20 has an invalid length. [ 359.013936][T16135] netlink: 'syz.2.4337': attribute type 1 has an invalid length. [ 359.143887][T16138] bond4: (slave gretap1): making interface the new active one [ 359.153798][T16138] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 359.327217][T16143] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4340'. [ 359.381051][T16147] pimreg: entered allmulticast mode [ 359.387537][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4343'. [ 359.625137][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 360.664991][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 360.807419][T16214] netlink: 'syz.2.4372': attribute type 1 has an invalid length. [ 361.000027][T16221] bond5: (slave geneve2): making interface the new active one [ 361.008834][T16221] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 361.021462][ T1140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.113386][ T1140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.132247][T16226] syzkaller1: entered promiscuous mode [ 361.140023][T16226] syzkaller1: entered allmulticast mode [ 361.150853][ T1140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.201444][ T1140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.705098][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 362.434696][T16271] netlink: 'syz.2.4395': attribute type 1 has an invalid length. [ 362.460786][T16271] netlink: 'syz.2.4395': attribute type 2 has an invalid length. [ 362.499133][T16271] bond0: (slave bond1): Error -95 calling ndo_bpf [ 362.520089][T16271] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 362.744996][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 363.785147][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 364.825127][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.221109][T16361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4428'. [ 365.727480][T16378] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 365.865150][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 365.978923][T16384] netlink: 'syz.1.4439': attribute type 1 has an invalid length. [ 366.181537][T16394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4444'. [ 366.503091][T16404] netlink: 'syz.1.4449': attribute type 1 has an invalid length. [ 366.905188][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 367.305207][T16438] netlink: 'syz.4.4462': attribute type 7 has an invalid length. [ 367.337540][T16438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4462'. [ 367.578869][T16449] netlink: 'syz.1.4468': attribute type 1 has an invalid length. [ 367.753021][T16451] bond1: (slave bridge1): making interface the new active one [ 367.776694][T16451] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 367.945113][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 368.985124][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 369.582367][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4497'. [ 369.827940][T16532] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.853648][T16532] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.017234][T16532] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.025142][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 370.040030][T16532] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.187858][T16532] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.198533][T16532] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.297073][T16532] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.315116][T16532] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.455304][T16555] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4510'. [ 370.483414][T13155] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.494708][T13155] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.576771][T13155] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.595140][T13155] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.603629][T13155] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.626161][T13155] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.626507][T16560] netlink: 51 bytes leftover after parsing attributes in process `syz.4.4512'. [ 370.664758][T13155] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.691735][T13155] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.065088][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.105095][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 372.257262][T16630] netlink: 'syz.4.4541': attribute type 1 has an invalid length. [ 372.331963][T16630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.379076][T16636] bond4: (slave gretap1): making interface the new active one [ 372.402948][T16636] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 372.440198][T16638] netlink: 'syz.2.4544': attribute type 10 has an invalid length. [ 373.041998][T16661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4554'. [ 373.105429][T16661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4554'. [ 373.145255][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 373.394758][T16679] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 373.433673][ T30] audit: type=1800 audit(1756523056.992:9): pid=16676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4560" name="memory.events" dev="tmpfs" ino=4684 res=0 errno=0 [ 373.527386][T16683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4562'. [ 373.806054][T16665] netlink: 'syz.3.4556': attribute type 13 has an invalid length. [ 373.814294][T16665] netlink: 'syz.3.4556': attribute type 17 has an invalid length. [ 373.834070][T16665] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 374.185157][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 374.552433][T16715] ip6tnl3: entered promiscuous mode [ 375.225192][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.265134][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 376.293917][T16795] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 377.305124][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.345050][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 378.603458][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4635'. [ 378.622423][T16867] erspan0: entered promiscuous mode [ 378.630278][T16867] macvtap1: entered promiscuous mode [ 378.636000][T16867] macvtap1: entered allmulticast mode [ 378.641615][T16867] erspan0: entered allmulticast mode [ 379.385263][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 379.690378][T16905] pim6reg1: entered promiscuous mode [ 379.696249][T16905] pim6reg1: entered allmulticast mode [ 380.200348][T16920] syz.4.4655 (16920) used greatest stack depth: 15864 bytes left [ 380.425005][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 380.735499][T16943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4664'. [ 380.752327][T16943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4664'. [ 381.464986][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 381.542565][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4678'. [ 381.552665][T16977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4678'. [ 382.409173][T17007] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 382.505026][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 382.658222][T17018] sctp: [Deprecated]: syz.2.4696 (pid 17018) Use of int in max_burst socket option deprecated. [ 382.658222][T17018] Use struct sctp_assoc_value instead [ 383.545163][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 384.585111][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 385.625011][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 386.665232][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 387.132305][T17016] Set syz1 is full, maxelem 65536 reached [ 387.708611][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 388.745358][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.785066][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 389.998277][T17094] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4720'. [ 390.087180][T17097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4723'. [ 390.253490][T17098] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 390.825130][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 391.104332][ T30] audit: type=1800 audit(1756523074.662:10): pid=17121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4732" name="memory.events" dev="tmpfs" ino=4565 res=0 errno=0 [ 391.273230][T17135] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4737'. [ 391.865015][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 392.614144][T17181] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4751'. [ 392.904984][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 393.198549][T17197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4759'. [ 393.873841][T17218] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 393.882009][T17218] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 393.890396][T17218] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 393.898281][T17218] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 393.906148][T17218] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 394.203595][T17226] team0: entered promiscuous mode [ 394.225186][T17226] team_slave_0: entered promiscuous mode [ 394.231538][T17226] team_slave_1: entered promiscuous mode [ 394.454786][T17233] gtp0: entered promiscuous mode [ 394.542651][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4771'. [ 394.984978][ C0] net_ratelimit: 3317 callbacks suppressed [ 394.985002][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 395.349351][T17249] syzkaller1: entered promiscuous mode [ 395.355326][T17249] syzkaller1: entered allmulticast mode [ 395.771381][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4784'. [ 395.818626][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4784'. [ 396.025155][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 396.077763][T17284] netlink: 'syz.2.4790': attribute type 1 has an invalid length. [ 396.423110][T17297] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4797'. [ 396.696530][T17311] tipc: Failed to remove unknown binding: 66,1,1/2886997162:867218829/867218831 [ 397.065024][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 397.656572][T17345] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1899123549/1899123551 [ 397.942727][T17347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4819'. [ 398.104994][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.144973][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 399.697285][T17401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4837'. [ 399.715117][T17401] netlink: 'syz.4.4837': attribute type 7 has an invalid length. [ 399.722954][T17401] netlink: 'syz.4.4837': attribute type 8 has an invalid length. [ 399.735637][T17401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4837'. [ 399.839057][T17380] netlink: 'syz.2.4831': attribute type 13 has an invalid length. [ 399.858669][T17380] netlink: 'syz.2.4831': attribute type 17 has an invalid length. [ 399.920040][T17380] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 400.184994][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 401.186133][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4851'. [ 401.224967][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.264994][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 402.399128][T17481] syzkaller1: entered promiscuous mode [ 402.409225][T17481] syzkaller1: entered allmulticast mode [ 402.754595][T17496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4871'. [ 403.102076][T17508] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4877'. [ 403.121498][T17508] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4877'. [ 403.132308][T17508] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4877'. [ 403.304970][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 403.669333][T17536] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4884'. [ 404.351839][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 404.663183][T17549] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4895'. [ 405.385010][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 406.424992][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.078363][T17568] pim6reg1: entered promiscuous mode [ 407.085189][T17568] pim6reg1: entered allmulticast mode [ 407.442210][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4906'. [ 407.465112][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 407.486983][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4906'. [ 408.504968][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 408.651071][T17616] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4916'. [ 409.146810][T17630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4925'. [ 409.545097][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 409.623031][T17647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4932'. [ 409.791969][T17653] netlink: 'syz.0.4935': attribute type 1 has an invalid length. [ 409.849337][T17653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 409.900447][T17653] bond3: (slave dummy0): making interface the new active one [ 409.918047][T17653] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 410.512395][T17680] veth1_to_bond: entered allmulticast mode [ 410.543265][T17680] bond_slave_1: entered promiscuous mode [ 410.563893][T17679] bond_slave_1: left promiscuous mode [ 410.585093][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 410.598129][T17679] veth1_to_bond: left allmulticast mode [ 410.847806][T17689] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4948'. [ 410.895637][T17689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.066950][T17697] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 411.625155][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.665073][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 412.756537][T17744] netlink: 'syz.0.4975': attribute type 1 has an invalid length. [ 412.959669][T17746] bond4: (slave bridge1): making interface the new active one [ 412.972178][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4976'. [ 412.996400][T17746] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 413.564674][T17758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4980'. [ 413.705070][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 414.745095][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 415.784980][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 416.824987][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.864968][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 417.971401][T17791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4993'. [ 418.779632][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4997'. [ 418.789539][T17800] netlink: 'syz.3.4997': attribute type 15 has an invalid length. [ 418.904986][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 419.051925][T17791] geneve3: entered promiscuous mode [ 419.073748][T17800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4997'. [ 419.084528][T13160] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 419.108977][T13160] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 419.144625][T13160] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 419.146530][T17800] netlink: 'syz.3.4997': attribute type 15 has an invalid length. [ 419.166316][T13158] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 419.209336][T17802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4998'. [ 419.543132][T17819] syzkaller1: entered promiscuous mode [ 419.549556][T17819] syzkaller1: entered allmulticast mode [ 419.945089][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 420.322556][T17860] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5020'. [ 420.363519][T17854] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5020'. [ 420.567548][T17872] syzkaller1: entered promiscuous mode [ 420.581548][T17872] syzkaller1: entered allmulticast mode [ 420.600333][T17873] netlink: 'syz.3.5029': attribute type 13 has an invalid length. [ 420.985057][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.025149][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 422.367188][T17945] lo: Caught tx_queue_len zero misconfig [ 422.594079][T17950] netlink: 'syz.1.5055': attribute type 3 has an invalid length. [ 423.065240][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 424.105129][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.149751][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 425.482128][T17996] geneve3: entered promiscuous mode [ 425.960507][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5080'. [ 426.185210][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 426.859366][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5087'. [ 427.048170][T18064] syzkaller1: entered promiscuous mode [ 427.053941][T18064] syzkaller1: entered allmulticast mode [ 427.225214][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.232705][T18119] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5118'. [ 428.265141][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 428.282853][T18119] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5118'. [ 428.298778][T18119] netlink: 276 bytes leftover after parsing attributes in process `syz.3.5118'. [ 428.309962][T18119] netlink: 186 bytes leftover after parsing attributes in process `syz.3.5118'. [ 429.106134][T18143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5128'. [ 429.305082][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 429.346672][T18157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5133'. [ 429.596629][T18160] syzkaller1: entered promiscuous mode [ 429.612907][T18160] syzkaller1: entered allmulticast mode [ 430.345255][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 430.711446][T18197] netlink: 'syz.1.5146': attribute type 13 has an invalid length. [ 430.725138][T18197] netlink: 'syz.1.5146': attribute type 17 has an invalid length. [ 431.388247][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.425256][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 432.481809][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5152'. [ 432.667183][T18197] sit0: left promiscuous mode [ 432.722872][T18197] bridge0: port 3(syz_tun) entered blocking state [ 432.729669][T18197] bridge0: port 3(syz_tun) entered forwarding state [ 432.737047][T18197] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.744258][T18197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.751847][T18197] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.759189][T18197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.863170][T18197] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.971633][T18215] sit0: left promiscuous mode [ 433.003366][T18215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.006056][T18225] netlink: 'syz.4.5160': attribute type 1 has an invalid length. [ 433.022676][T18215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.158817][T18226] gretap2: entered allmulticast mode [ 433.169939][T18226] bond5: (slave gretap2): making interface the new active one [ 433.188017][T18226] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 433.352557][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5164'. [ 433.420836][T18235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5164'. [ 433.465774][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 433.652855][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5168'. [ 433.741299][T18242] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 433.874456][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5171'. [ 433.916606][T18255] syzkaller1: entered promiscuous mode [ 433.922864][T18255] syzkaller1: entered allmulticast mode [ 433.931984][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5171'. [ 434.231162][T18269] netlink: 'syz.2.5179': attribute type 1 has an invalid length. [ 434.303587][T18269] gretap2: entered allmulticast mode [ 434.313495][T18269] bond6: (slave gretap2): making interface the new active one [ 434.322870][T18269] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 434.412391][T18277] netlink: 'syz.2.5182': attribute type 4 has an invalid length. [ 434.500050][T18280] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5185'. [ 434.515783][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 434.912461][T18298] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.545121][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 435.887543][T18334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5206'. [ 435.969164][T18336] netlink: 'syz.4.5207': attribute type 12 has an invalid length. [ 436.010824][T18338] syzkaller0: entered promiscuous mode [ 436.021246][T18338] syzkaller0: entered allmulticast mode [ 436.159903][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5210'. [ 436.329019][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.394941][T18343] net_ratelimit: 378 callbacks suppressed [ 436.394964][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.409422][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.417545][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.426003][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.433730][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.441616][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.449497][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.457157][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.493789][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.501654][T18343] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 436.623657][T18354] debugfs: 'netdev:nicvf0' already exists in 'phy9' [ 437.301687][T18380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5225'. [ 437.921035][T18408] netlink: 'syz.1.5237': attribute type 2 has an invalid length. [ 438.538354][T18434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5250'. [ 438.802204][T18448] netlink: 'syz.3.5255': attribute type 1 has an invalid length. [ 438.810469][T18448] netlink: 'syz.3.5255': attribute type 4 has an invalid length. [ 438.824040][T18448] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5255'. [ 439.026752][T18455] netlink: 'syz.1.5257': attribute type 4 has an invalid length. [ 439.082848][T18455] netlink: 'syz.1.5257': attribute type 4 has an invalid length. [ 439.802502][T18490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5273'. [ 439.983749][T18498] syzkaller0: entered promiscuous mode [ 439.989650][T18498] syzkaller0: entered allmulticast mode [ 440.305159][T18509] netlink: 'syz.1.5283': attribute type 2 has an invalid length. [ 440.313539][T18509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5283'. [ 440.542461][T18521] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5287'. [ 441.795067][ C0] net_ratelimit: 2936 callbacks suppressed [ 441.795090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 442.825533][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 443.736627][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5312'. [ 443.771502][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5312'. [ 443.865201][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.576038][T18618] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 444.905065][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 444.960885][T18640] policy can only be matched on NF_INET_PRE_ROUTING [ 444.960919][T18640] unable to load match [ 445.549568][T18669] syzkaller0: entered promiscuous mode [ 445.575864][T18669] syzkaller0: entered allmulticast mode [ 445.602916][T18672] netlink: 'syz.0.5351': attribute type 1 has an invalid length. [ 445.631217][T18672] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5351'. [ 445.649578][T18672] netlink: 'syz.0.5351': attribute type 2 has an invalid length. [ 445.659368][T18672] netlink: 'syz.0.5351': attribute type 1 has an invalid length. [ 445.682295][T18677] veth1_to_bond: entered allmulticast mode [ 445.700893][T18677] bond_slave_1: entered promiscuous mode [ 445.726980][T18676] bond_slave_1: left promiscuous mode [ 445.733073][T18676] veth1_to_bond: left allmulticast mode [ 445.789276][T18681] netlink: 'syz.3.5354': attribute type 1 has an invalid length. [ 445.889303][T18681] 8021q: adding VLAN 0 to HW filter on device bond4 [ 445.937986][T18684] [ 445.940397][T18684] ====================================================== [ 445.946811][T18687] bridge0: port 1(dummy0) entered disabled state [ 445.947558][T18684] WARNING: possible circular locking dependency detected [ 445.947570][T18684] syzkaller #0 Not tainted [ 445.965533][T18684] ------------------------------------------------------ [ 445.972572][T18684] syz.0.5355/18684 is trying to acquire lock: [ 445.978908][T18684] ffff888024a4ca98 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450 [ 445.988519][T18684] [ 445.988519][T18684] but task is already holding lock: [ 445.995936][T18684] ffff888024a4c558 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 446.006160][T18684] [ 446.006160][T18684] which lock already depends on the new lock. [ 446.006160][T18684] [ 446.016735][T18684] [ 446.016735][T18684] the existing dependency chain (in reverse order) is: [ 446.025839][T18684] [ 446.025839][T18684] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 446.034455][T18684] lock_acquire+0x120/0x360 [ 446.039596][T18684] blk_alloc_queue+0x538/0x620 [ 446.045146][T18684] __blk_mq_alloc_disk+0x15c/0x340 [ 446.050775][T18684] nbd_dev_add+0x46c/0xae0 [ 446.055766][T18684] nbd_init+0x168/0x1f0 [ 446.060449][T18684] do_one_initcall+0x233/0x820 [ 446.065823][T18684] do_initcall_level+0x104/0x190 [ 446.071296][T18684] do_initcalls+0x59/0xa0 [ 446.076251][T18684] kernel_init_freeable+0x334/0x4b0 [ 446.082189][T18684] kernel_init+0x1d/0x1d0 [ 446.087068][T18684] ret_from_fork+0x3f9/0x770 [ 446.092305][T18684] ret_from_fork_asm+0x1a/0x30 [ 446.097899][T18684] [ 446.097899][T18684] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 446.105131][T18684] lock_acquire+0x120/0x360 [ 446.110188][T18684] fs_reclaim_acquire+0x72/0x100 [ 446.115879][T18684] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 446.122751][T18684] __alloc_skb+0x112/0x2d0 [ 446.127952][T18684] tipc_msg_build+0x13b/0xcf0 [ 446.133339][T18684] __tipc_sendstream+0x8ac/0x1290 [ 446.138978][T18684] tipc_sendstream+0x55/0x70 [ 446.144179][T18684] __sock_sendmsg+0x219/0x270 [ 446.149475][T18684] ____sys_sendmsg+0x505/0x830 [ 446.154854][T18684] ___sys_sendmsg+0x21f/0x2a0 [ 446.160232][T18684] __x64_sys_sendmsg+0x19b/0x260 [ 446.165693][T18684] do_syscall_64+0xfa/0x3b0 [ 446.170717][T18684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.177137][T18684] [ 446.177137][T18684] -> #4 (sk_lock-AF_TIPC){+.+.}-{0:0}: [ 446.184807][T18684] lock_acquire+0x120/0x360 [ 446.189955][T18684] lock_sock_nested+0x48/0x100 [ 446.195350][T18684] tipc_shutdown+0x62/0x4f0 [ 446.200380][T18684] nbd_mark_nsock_dead+0x2e9/0x560 [ 446.206203][T18684] sock_shutdown+0x15e/0x260 [ 446.211498][T18684] nbd_config_put+0x342/0x790 [ 446.216704][T18684] nbd_genl_connect+0x167c/0x18f0 [ 446.222293][T18684] genl_family_rcv_msg_doit+0x215/0x300 [ 446.228451][T18684] genl_rcv_msg+0x60e/0x790 [ 446.233585][T18684] netlink_rcv_skb+0x205/0x470 [ 446.238882][T18684] genl_rcv+0x28/0x40 [ 446.243671][T18684] netlink_unicast+0x82c/0x9e0 [ 446.248977][T18684] netlink_sendmsg+0x805/0xb30 [ 446.254263][T18684] __sock_sendmsg+0x219/0x270 [ 446.259655][T18684] ____sys_sendmsg+0x505/0x830 [ 446.265030][T18684] ___sys_sendmsg+0x21f/0x2a0 [ 446.270583][T18684] __x64_sys_sendmsg+0x19b/0x260 [ 446.276048][T18684] do_syscall_64+0xfa/0x3b0 [ 446.281075][T18684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.288021][T18684] [ 446.288021][T18684] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 446.296040][T18684] lock_acquire+0x120/0x360 [ 446.301266][T18684] __mutex_lock+0x187/0x1350 [ 446.306381][T18684] nbd_queue_rq+0x257/0xf10 [ 446.311497][T18684] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 446.317661][T18684] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 446.324529][T18684] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 446.331211][T18684] blk_mq_run_hw_queue+0x348/0x4f0 [ 446.336932][T18684] blk_mq_dispatch_list+0xd0c/0xe00 [ 446.342659][T18684] blk_mq_flush_plug_list+0x469/0x550 [ 446.348645][T18684] __blk_flush_plug+0x3d3/0x4b0 [ 446.354057][T18684] __submit_bio+0x2d3/0x5a0 [ 446.359081][T18684] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 446.365424][T18684] block_read_full_folio+0x599/0x830 [ 446.371479][T18684] filemap_read_folio+0x114/0x380 [ 446.377232][T18684] do_read_cache_folio+0x350/0x590 [ 446.382985][T18684] read_part_sector+0xb6/0x2b0 [ 446.388500][T18684] adfspart_check_ICS+0xa4/0xa50 [ 446.393982][T18684] bdev_disk_changed+0x75c/0x14b0 [ 446.399636][T18684] blkdev_get_whole+0x380/0x510 [ 446.405390][T18684] bdev_open+0x31e/0xd30 [ 446.410447][T18684] blkdev_open+0x3a8/0x510 [ 446.415506][T18684] do_dentry_open+0x953/0x13f0 [ 446.420889][T18684] vfs_open+0x3b/0x340 [ 446.425572][T18684] path_openat+0x2ee5/0x3830 [ 446.430778][T18684] do_filp_open+0x1fa/0x410 [ 446.435888][T18684] do_sys_openat2+0x121/0x1c0 [ 446.441088][T18684] __x64_sys_openat+0x138/0x170 [ 446.446641][T18684] do_syscall_64+0xfa/0x3b0 [ 446.451773][T18684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.458428][T18684] [ 446.458428][T18684] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 446.465743][T18684] lock_acquire+0x120/0x360 [ 446.470808][T18684] __mutex_lock+0x187/0x1350 [ 446.475976][T18684] nbd_queue_rq+0xc8/0xf10 [ 446.480940][T18684] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 446.487310][T18684] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 446.494164][T18684] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 446.500933][T18684] blk_mq_run_hw_queue+0x348/0x4f0 [ 446.506750][T18684] blk_mq_dispatch_list+0xd0c/0xe00 [ 446.512597][T18684] blk_mq_flush_plug_list+0x469/0x550 [ 446.518785][T18684] __blk_flush_plug+0x3d3/0x4b0 [ 446.524448][T18684] __submit_bio+0x2d3/0x5a0 [ 446.530286][T18684] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 446.537202][T18684] block_read_full_folio+0x599/0x830 [ 446.543303][T18684] filemap_read_folio+0x114/0x380 [ 446.549039][T18684] do_read_cache_folio+0x350/0x590 [ 446.555154][T18684] read_part_sector+0xb6/0x2b0 [ 446.561181][T18684] adfspart_check_ICS+0xa4/0xa50 [ 446.567208][T18684] bdev_disk_changed+0x75c/0x14b0 [ 446.574017][T18684] blkdev_get_whole+0x380/0x510 [ 446.579787][T18684] bdev_open+0x31e/0xd30 [ 446.585078][T18684] blkdev_open+0x3a8/0x510 [ 446.590303][T18684] do_dentry_open+0x953/0x13f0 [ 446.595787][T18684] vfs_open+0x3b/0x340 [ 446.600533][T18684] path_openat+0x2ee5/0x3830 [ 446.606280][T18684] do_filp_open+0x1fa/0x410 [ 446.611424][T18684] do_sys_openat2+0x121/0x1c0 [ 446.616626][T18684] __x64_sys_openat+0x138/0x170 [ 446.622086][T18684] do_syscall_64+0xfa/0x3b0 [ 446.627401][T18684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.633833][T18684] [ 446.633833][T18684] -> #1 (set->srcu){.+.+}-{0:0}: [ 446.643145][T18684] lock_sync+0xba/0x160 [ 446.648391][T18684] __synchronize_srcu+0x96/0x3a0 [ 446.653900][T18684] elevator_switch+0x12b/0x640 [ 446.659395][T18684] elevator_change+0x2d4/0x450 [ 446.664979][T18684] elevator_set_default+0x186/0x260 [ 446.671269][T18684] blk_register_queue+0x34e/0x3f0 [ 446.676844][T18684] __add_disk+0x677/0xd50 [ 446.682346][T18684] add_disk_fwnode+0xfc/0x480 [ 446.688279][T18684] nbd_dev_add+0x717/0xae0 [ 446.693802][T18684] nbd_init+0x168/0x1f0 [ 446.698789][T18684] do_one_initcall+0x233/0x820 [ 446.704362][T18684] do_initcall_level+0x104/0x190 [ 446.710290][T18684] do_initcalls+0x59/0xa0 [ 446.715335][T18684] kernel_init_freeable+0x334/0x4b0 [ 446.721072][T18684] kernel_init+0x1d/0x1d0 [ 446.726315][T18684] ret_from_fork+0x3f9/0x770 [ 446.731622][T18684] ret_from_fork_asm+0x1a/0x30 [ 446.737178][T18684] [ 446.737178][T18684] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 446.745533][T18684] validate_chain+0xb9b/0x2140 [ 446.750933][T18684] __lock_acquire+0xab9/0xd20 [ 446.756599][T18684] lock_acquire+0x120/0x360 [ 446.761919][T18684] __mutex_lock+0x187/0x1350 [ 446.767309][T18684] elevator_change+0x19b/0x450 [ 446.772702][T18684] elevator_set_none+0x42/0xb0 [ 446.777999][T18684] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 446.784567][T18684] nbd_start_device+0x17f/0xb10 [ 446.790385][T18684] nbd_genl_connect+0x135b/0x18f0 [ 446.795936][T18684] genl_family_rcv_msg_doit+0x215/0x300 [ 446.802204][T18684] genl_rcv_msg+0x60e/0x790 [ 446.807343][T18684] netlink_rcv_skb+0x205/0x470 [ 446.812664][T18684] genl_rcv+0x28/0x40 [ 446.817428][T18684] netlink_unicast+0x82c/0x9e0 [ 446.822764][T18684] netlink_sendmsg+0x805/0xb30 [ 446.828076][T18684] __sock_sendmsg+0x219/0x270 [ 446.833383][T18684] ____sys_sendmsg+0x505/0x830 [ 446.838672][T18684] ___sys_sendmsg+0x21f/0x2a0 [ 446.843981][T18684] __x64_sys_sendmsg+0x19b/0x260 [ 446.849537][T18684] do_syscall_64+0xfa/0x3b0 [ 446.854659][T18684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.861163][T18684] [ 446.861163][T18684] other info that might help us debug this: [ 446.861163][T18684] [ 446.871744][T18684] Chain exists of: [ 446.871744][T18684] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 446.871744][T18684] [ 446.886079][T18684] Possible unsafe locking scenario: [ 446.886079][T18684] [ 446.894774][T18684] CPU0 CPU1 [ 446.900346][T18684] ---- ---- [ 446.905842][T18684] lock(&q->q_usage_counter(io)#52); [ 446.911228][T18684] lock(fs_reclaim); [ 446.917903][T18684] lock(&q->q_usage_counter(io)#52); [ 446.925806][T18684] lock(&q->elevator_lock); [ 446.930399][T18684] [ 446.930399][T18684] *** DEADLOCK *** [ 446.930399][T18684] [ 446.938636][T18684] 6 locks held by syz.0.5355/18684: [ 446.943926][T18684] #0: ffffffff8f59e3f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 446.952651][T18684] #1: ffffffff8f59e208 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 446.961650][T18684] #2: ffff888024fc6988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 446.973151][T18684] #3: ffff888024fc68d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 446.984784][T18684] #4: ffff888024a4c558 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 446.995435][T18684] #5: ffff888024a4c590 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x180/0x450 [ 447.006522][T18684] [ 447.006522][T18684] stack backtrace: [ 447.012512][T18684] CPU: 0 UID: 0 PID: 18684 Comm: syz.0.5355 Not tainted syzkaller #0 PREEMPT(full) [ 447.012532][T18684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.012541][T18684] Call Trace: [ 447.012554][T18684] [ 447.012561][T18684] dump_stack_lvl+0x189/0x250 [ 447.012582][T18684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.012599][T18684] ? __pfx__printk+0x10/0x10 [ 447.012619][T18684] ? print_lock_name+0xde/0x100 [ 447.012639][T18684] print_circular_bug+0x2ee/0x310 [ 447.012657][T18684] check_noncircular+0x134/0x160 [ 447.012675][T18684] validate_chain+0xb9b/0x2140 [ 447.012698][T18684] __lock_acquire+0xab9/0xd20 [ 447.012720][T18684] ? elevator_change+0x19b/0x450 [ 447.012739][T18684] lock_acquire+0x120/0x360 [ 447.012758][T18684] ? elevator_change+0x19b/0x450 [ 447.012793][T18684] __mutex_lock+0x187/0x1350 [ 447.012808][T18684] ? elevator_change+0x19b/0x450 [ 447.012828][T18684] ? xa_find_after+0xae/0x430 [ 447.012848][T18684] ? xa_find_after+0x402/0x430 [ 447.012863][T18684] ? elevator_change+0x19b/0x450 [ 447.012888][T18684] ? xa_find_after+0xae/0x430 [ 447.012905][T18684] ? __pfx___mutex_lock+0x10/0x10 [ 447.012921][T18684] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 447.012948][T18684] elevator_change+0x19b/0x450 [ 447.012974][T18684] ? elevator_set_none+0x37/0xb0 [ 447.012996][T18684] elevator_set_none+0x42/0xb0 [ 447.013017][T18684] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 447.013039][T18684] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 447.013060][T18684] ? sysfs_add_file_mode_ns+0x259/0x300 [ 447.013086][T18684] nbd_start_device+0x17f/0xb10 [ 447.013109][T18684] ? device_create_file+0xf4/0x1c0 [ 447.013124][T18684] nbd_genl_connect+0x135b/0x18f0 [ 447.013148][T18684] ? __pfx_nbd_genl_connect+0x10/0x10 [ 447.013172][T18684] ? __nla_parse+0x40/0x60 [ 447.013194][T18684] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 447.013216][T18684] genl_family_rcv_msg_doit+0x215/0x300 [ 447.013237][T18684] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 447.013261][T18684] ? stack_trace_save+0x9c/0xe0 [ 447.013279][T18684] genl_rcv_msg+0x60e/0x790 [ 447.013300][T18684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.013324][T18684] ? __pfx_nbd_genl_connect+0x10/0x10 [ 447.013349][T18684] netlink_rcv_skb+0x205/0x470 [ 447.013362][T18684] ? __lock_acquire+0xab9/0xd20 [ 447.013381][T18684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 447.013399][T18684] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.013419][T18684] ? down_read+0x1ad/0x2e0 [ 447.013434][T18684] genl_rcv+0x28/0x40 [ 447.013450][T18684] netlink_unicast+0x82c/0x9e0 [ 447.013474][T18684] ? __pfx_netlink_unicast+0x10/0x10 [ 447.013494][T18684] ? netlink_sendmsg+0x642/0xb30 [ 447.013507][T18684] ? skb_put+0x11b/0x210 [ 447.013523][T18684] netlink_sendmsg+0x805/0xb30 [ 447.013541][T18684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.013571][T18684] ? aa_sock_msg_perm+0xf1/0x1d0 [ 447.013586][T18684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.013601][T18684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.013615][T18684] __sock_sendmsg+0x219/0x270 [ 447.013635][T18684] ____sys_sendmsg+0x505/0x830 [ 447.013654][T18684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.013673][T18684] ? import_iovec+0x74/0xa0 [ 447.013690][T18684] ___sys_sendmsg+0x21f/0x2a0 [ 447.013707][T18684] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.013735][T18684] ? __fget_files+0x2a/0x420 [ 447.013747][T18684] ? __fget_files+0x3a0/0x420 [ 447.013763][T18684] __x64_sys_sendmsg+0x19b/0x260 [ 447.013780][T18684] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.013799][T18684] ? rcu_is_watching+0x15/0xb0 [ 447.013815][T18684] ? do_syscall_64+0xbe/0x3b0 [ 447.013831][T18684] do_syscall_64+0xfa/0x3b0 [ 447.013845][T18684] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.013858][T18684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.013872][T18684] ? clear_bhb_loop+0x60/0xb0 [ 447.013888][T18684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.013902][T18684] RIP: 0033:0x7f748918ebe9 [ 447.013917][T18684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.013930][T18684] RSP: 002b:00007f748a024038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.013946][T18684] RAX: ffffffffffffffda RBX: 00007f74893c5fa0 RCX: 00007f748918ebe9 [ 447.013958][T18684] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 447.013968][T18684] RBP: 00007f7489211e19 R08: 0000000000000000 R09: 0000000000000000 [ 447.013977][T18684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.013986][T18684] R13: 00007f74893c6038 R14: 00007f74893c5fa0 R15: 00007ffc5c31a418 [ 447.014002][T18684] [ 447.025164][T18687] dummy0: left allmulticast mode [ 447.034006][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 447.041042][T18687] dummy0: left promiscuous mode [ 447.490175][T18687] bridge0: port 1(dummy0) entered disabled state [ 447.500324][T18687] bond4: (slave dummy0): making interface the new active one [ 447.509312][T18687] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 447.540047][ T5880] block nbd3: Receive control failed (result -32) [ 447.540662][ T5869] block nbd3: Receive control failed (result -32) [ 447.585741][T18684] nbd3: detected capacity change from 0 to 127 [ 448.106242][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 449.145062][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 450.185313][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 451.225021][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 452.265480][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 453.305126][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 454.345344][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 455.385064][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available