last executing test programs: 7.735865733s ago: executing program 2 (id=22016): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000029c0)={r3, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x3, 0xb9, 0x9, 0x80, 0x2, 0x5}, &(0x7f0000000240)=0x9c) 7.713552605s ago: executing program 2 (id=22017): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 7.576637344s ago: executing program 2 (id=22018): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.049997691s ago: executing program 0 (id=22068): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4014) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 2.771935795s ago: executing program 2 (id=22072): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) 2.69594403s ago: executing program 2 (id=22073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x20000000) 2.258563953s ago: executing program 2 (id=22075): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.116027661s ago: executing program 0 (id=22078): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x100000000, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r5, r3, 0x0, r2}, 0x10) 2.071715073s ago: executing program 4 (id=22080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(r0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) 1.988058096s ago: executing program 0 (id=22082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x0, 0x9, 0x4}, 0x401}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1.938457675s ago: executing program 3 (id=22083): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000240)="f5c993fa3aff7f0000000000aef0000000000000", 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) 1.856333232s ago: executing program 3 (id=22084): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000024) 1.83487593s ago: executing program 4 (id=22085): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/19, 0x13}, 0x9}], 0x1, 0x45833af92e4b38be, 0x0) 1.820310976s ago: executing program 0 (id=22086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.80030915s ago: executing program 1 (id=22087): openat$tun(0xffffffffffffff9c, 0x0, 0x149540, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfb0a}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.736679635s ago: executing program 4 (id=22088): unshare(0x6020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = gettid() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x2020000) close(r2) 1.613957707s ago: executing program 4 (id=22089): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2, 0x5, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.597195232s ago: executing program 0 (id=22090): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 1.350628529s ago: executing program 1 (id=22091): connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b", 0x27}], 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="09fb05cd5b17f0896505a22ae7359cde7534ebd285eeffdcc16d17eb847d268f96dbef0cb2788f69128e5807cabf5febbea9f3af1728c43010321fe35ab1bd50b26531473ec12eeb24c15f6247c30b4ba41347fd2ecb64c7f2f254c5566f8dad74e53cad7bf18ef03acc9475cbecaca73d4f425247fb72e587a4df6f89a99da2f70b36cecaf4192de5b95d59528bf443cb2eea28def8c0e2afe6d20317e6018103ed06b2fd36f473043435594f7910", 0xaf}], 0x1}}], 0x1, 0x4044805) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2000c830}, 0x4080) 1.328368384s ago: executing program 3 (id=22092): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.239966806s ago: executing program 0 (id=22093): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000006fc0100000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r2 = socket(0x1d, 0x802, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1.150672s ago: executing program 3 (id=22094): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000000)=""/8, 0xfffffffffffffd0b, 0x400123eb, 0x0, 0x1154103478d401ea) 773.322652ms ago: executing program 1 (id=22095): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200"/83], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) 620.782765ms ago: executing program 1 (id=22096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x6, 0xffff}, {0xffff, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 455.480822ms ago: executing program 1 (id=22097): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x17, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x10000) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0xa) 310.198668ms ago: executing program 4 (id=22098): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1, @loopback, 0x10000009, 0x200}, 0x20) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 305.770098ms ago: executing program 1 (id=22099): socket(0x2, 0x80805, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000003c0)=0x1) close(0x4) 197.996027ms ago: executing program 3 (id=22100): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0) 86.771232ms ago: executing program 4 (id=22101): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68090}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 0s ago: executing program 3 (id=22102): socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 675 [ 738.711177][ T9909] tun0: persist enabled [ 738.718147][ T9909] tun0: tun_chr_ioctl cmd 1074025675 [ 738.730153][ T9909] tun0: persist enabled [ 739.115746][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17223'. [ 740.027548][ T9974] syzkaller1: entered promiscuous mode [ 740.036241][ T9974] syzkaller1: entered allmulticast mode [ 740.229446][ T9980] syzkaller1: entered promiscuous mode [ 740.240506][ T9980] syzkaller1: entered allmulticast mode [ 740.708188][ T1105] tipc: Subscription rejected, illegal request [ 740.796150][ T9967] lo speed is unknown, defaulting to 1000 [ 741.092427][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17262'. [ 741.211462][T10021] netlink: 'syz.4.17264': attribute type 1 has an invalid length. [ 741.411350][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17270'. [ 741.413248][T10029] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17268'. [ 741.434632][T10035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17271'. [ 741.443942][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17270'. [ 741.473193][T10029] ip6gre2: entered promiscuous mode [ 741.486815][T10029] ip6gre2: entered allmulticast mode [ 741.488644][ T5640] block nbd2: Receive control failed (result -107) [ 741.526312][T10036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17268'. [ 741.839484][T10053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17279'. [ 742.250338][T10081] lo: entered allmulticast mode [ 742.266731][T10081] lo: left allmulticast mode [ 742.277754][T10081] pim6reg: left allmulticast mode [ 742.942469][T10099] bond8: option tlb_dynamic_lb: invalid value (128) [ 742.982538][T10099] bond8 (unregistering): Released all slaves [ 743.150439][T10097] dvmrp0: entered allmulticast mode [ 743.296208][T10109] netlink: 204 bytes leftover after parsing attributes in process `syz.3.17304'. [ 743.475562][T10096] lo speed is unknown, defaulting to 1000 [ 743.886926][ T5640] block nbd7: Receive control failed (result -32) [ 743.886926][ T4754] block nbd7: Receive control failed (result -32) [ 743.901574][ T5638] block nbd7: Receive control failed (result -32) [ 746.268688][T10218] syzkaller1: entered promiscuous mode [ 746.278600][T10218] syzkaller1: entered allmulticast mode [ 747.095805][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.515582][T10285] netlink: 'syz.1.17376': attribute type 30 has an invalid length. [ 748.640935][ T4754] block nbd8: Receive control failed (result -32) [ 748.659808][ T5640] block nbd8: Receive control failed (result -32) [ 748.667871][ T5638] block nbd8: Receive control failed (result -32) [ 749.188987][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17406'. [ 749.306948][T10380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.545396][ T4754] block nbd9: Receive control failed (result -32) [ 749.546212][ T5640] block nbd9: Receive control failed (result -32) [ 749.558807][ T5638] block nbd9: Receive control failed (result -32) [ 749.589244][T10399] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.17418'. [ 750.384304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.387301][T10440] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 750.414523][T10440] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 750.603492][ T4754] block nbd10: Receive control failed (result -32) [ 750.610971][ T5640] block nbd10: Receive control failed (result -32) [ 750.618366][ T5638] block nbd10: Receive control failed (result -32) [ 750.620467][T10453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17442'. [ 751.425170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.882759][T10514] netlink: 204 bytes leftover after parsing attributes in process `syz.4.17469'. [ 751.908998][T10514] netlink: 84 bytes leftover after parsing attributes in process `syz.4.17469'. [ 752.464653][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.483065][T10539] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 752.741080][T10557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17488'. [ 752.766500][T10557] netlink: 'syz.2.17488': attribute type 10 has an invalid length. [ 752.785315][T10557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17488'. [ 753.136881][T10551] lo speed is unknown, defaulting to 1000 [ 753.403965][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17498'. [ 753.494244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.729211][T10591] netlink: 27 bytes leftover after parsing attributes in process `syz.3.17504'. [ 754.138152][T10599] syzkaller1: entered promiscuous mode [ 754.166468][T10599] syzkaller1: entered allmulticast mode [ 754.507537][T10616] netlink: 'syz.2.17510': attribute type 8 has an invalid length. [ 754.529931][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17510'. [ 754.544294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.889360][T10635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17524'. [ 754.938416][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17526'. [ 755.148907][ T1117] tipc: Subscription rejected, illegal request [ 755.541727][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17542'. [ 755.803632][T10660] lo speed is unknown, defaulting to 1000 [ 755.830979][T10685] syzkaller1: entered promiscuous mode [ 755.837892][T10685] syzkaller1: entered allmulticast mode [ 756.102029][T10697] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 756.565177][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17560'. [ 756.833974][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17567'. [ 757.032607][T10733] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 758.828298][T10768] lo speed is unknown, defaulting to 1000 [ 759.547453][T10845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17614'. [ 759.996565][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17622'. [ 760.460846][T10895] netlink: 'syz.0.17637': attribute type 11 has an invalid length. [ 761.233298][T10930] syzkaller1: entered promiscuous mode [ 761.253102][T10930] syzkaller1: entered allmulticast mode [ 761.569248][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17657'. [ 762.033118][T10978] sctp: [Deprecated]: syz.1.17672 (pid 10978) Use of int in max_burst socket option deprecated. [ 762.033118][T10978] Use struct sctp_assoc_value instead [ 762.064576][T10980] erspan0: left allmulticast mode [ 762.075363][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17674'. [ 762.640215][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17691'. [ 762.650323][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17691'. [ 763.565177][T11060] netlink: 'syz.1.17708': attribute type 8 has an invalid length. [ 764.096532][T11048] lo speed is unknown, defaulting to 1000 [ 765.550531][T11109] netlink: 'syz.1.17728': attribute type 1 has an invalid length. [ 765.919407][T11127] ip_vti0: left allmulticast mode [ 765.953546][T11127] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 767.955295][T11188] hsr0: entered allmulticast mode [ 767.975996][T11188] hsr_slave_0: entered allmulticast mode [ 767.983217][T11188] hsr_slave_1: entered allmulticast mode [ 768.005266][T11188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17762'. [ 768.040736][T11188] hsr_slave_0: left promiscuous mode [ 768.056554][T11188] hsr_slave_1: left promiscuous mode [ 768.074921][T11188] hsr0 (unregistering): left allmulticast mode [ 768.251536][T11192] netlink: 240 bytes leftover after parsing attributes in process `syz.2.17764'. [ 770.392780][T11256] netlink: 3 bytes leftover after parsing attributes in process `syz.3.17788'. [ 770.425996][T11256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17788'. [ 770.441282][T11256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17788'. [ 770.486843][T11261] syzkaller1: entered promiscuous mode [ 770.510701][T11261] syzkaller1: entered allmulticast mode [ 770.741311][T11276] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 770.869944][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17802'. [ 771.121638][T11308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17811'. [ 771.131475][T11308] batman_adv: batadv0: Interface deactivated: macvlan0 [ 771.139743][T11308] batadv_slave_1: left allmulticast mode [ 771.146422][T11308] batadv_slave_1: left promiscuous mode [ 771.159280][T11308] batman_adv: batadv0: Removing interface: macvlan0 [ 772.583510][T11373] netlink: 'syz.1.17842': attribute type 29 has an invalid length. [ 772.603885][T11373] netlink: 'syz.1.17842': attribute type 29 has an invalid length. [ 772.781117][T11383] batadv_slave_0: entered promiscuous mode [ 772.799599][T11382] batadv_slave_0: left promiscuous mode [ 773.449812][T11422] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17862'. [ 773.967085][T11416] lo speed is unknown, defaulting to 1000 [ 774.196599][T11428] hsr0: entered allmulticast mode [ 774.218112][T11428] hsr_slave_0: entered allmulticast mode [ 774.229014][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17864'. [ 774.238632][T11428] hsr_slave_1: entered allmulticast mode [ 775.943765][T11429] hsr_slave_0: left promiscuous mode [ 776.079901][T11429] hsr_slave_1: left promiscuous mode [ 776.146651][T11421] lo speed is unknown, defaulting to 1000 [ 776.987256][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17881'. [ 777.035611][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17881'. [ 777.644807][T11493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17890'. [ 777.971852][T11514] netlink: 'syz.2.17901': attribute type 10 has an invalid length. [ 779.535916][T11599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.549238][T11599] netlink: 'syz.2.17933': attribute type 2 has an invalid length. [ 779.557444][T11599] netlink: 'syz.2.17933': attribute type 2 has an invalid length. [ 779.581841][T11602] netlink: 'syz.1.17934': attribute type 2 has an invalid length. [ 779.591547][T11602] netlink: 'syz.1.17934': attribute type 1 has an invalid length. [ 779.600530][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17934'. [ 779.610440][T11602] nbd: illegal input index -120127480 [ 779.848151][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17942'. [ 779.874341][T11618] netlink: 'syz.2.17942': attribute type 7 has an invalid length. [ 779.894226][T11618] netlink: 'syz.2.17942': attribute type 8 has an invalid length. [ 779.914987][T11618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17942'. [ 780.006711][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17946'. [ 780.027601][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17947'. [ 780.614256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.616471][T11663] netlink: 'syz.3.17962': attribute type 2 has an invalid length. [ 780.650674][T11663] netlink: 'syz.3.17962': attribute type 2 has an invalid length. [ 781.664256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.694511][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.257246][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18003'. [ 783.521883][T11759] syzkaller1: entered promiscuous mode [ 783.535397][T11759] syzkaller1: entered allmulticast mode [ 783.734256][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.232686][T11781] netlink: 8752 bytes leftover after parsing attributes in process `syz.1.18015'. [ 784.613904][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18022'. [ 784.774232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.086632][T11862] smc: net device vlan1 applied user defined pnetid SYZ2 [ 787.430540][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18059'. [ 787.469190][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18060'. [ 787.595501][T11881] trusted_key: syz.3.18061 sent an empty control message without MSG_MORE. [ 788.720685][T11928] tipc: Enabled bearer , priority 10 [ 788.969933][T11940] netlink: 64 bytes leftover after parsing attributes in process `syz.0.18089'. [ 788.997682][T11945] sctp: [Deprecated]: syz.1.18090 (pid 11945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 788.997682][T11945] Use struct sctp_sack_info instead [ 789.037945][T11945] sctp: [Deprecated]: syz.1.18090 (pid 11945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 789.037945][T11945] Use struct sctp_sack_info instead [ 789.104254][T11940] nbd11: detected capacity change from 0 to 1 [ 789.118976][ T5640] block nbd11: Receive control failed (result -32) [ 789.141886][T11910] buffer_io_error: 138 callbacks suppressed [ 789.141904][T11910] Buffer I/O error on dev nbd11, logical block 0, async page read [ 789.156679][T11910] Buffer I/O error on dev nbd11, logical block 0, async page read [ 789.165083][T11910] Buffer I/O error on dev nbd11, logical block 0, async page read [ 789.173169][T11910] Buffer I/O error on dev nbd11, logical block 0, async page read [ 789.183684][T11910] Buffer I/O error on dev nbd11, logical block 0, async page read [ 789.192685][T11910] ldm_validate_partition_table(): Disk read failed. [ 789.200211][T11910] Buffer I/O error on dev nbd11, logical block 0, async page read [ 789.208671][T11910] Buffer I/O error on dev nbd11, logical block 0, async page read [ 789.229198][T11910] Buffer I/O error on dev nbd11, logical block 0, async page read [ 789.238512][T11910] Buffer I/O error on dev nbd11, logical block 0, async page read [ 789.246853][T11910] Dev nbd11: unable to read RDB block 0 [ 789.252554][T11910] Buffer I/O error on dev nbd11, logical block 0, async page read [ 789.261514][T11910] nbd11: unable to read partition table [ 789.267480][T11910] nbd11: partition table beyond EOD, truncated [ 789.463121][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18096'. [ 789.855771][T11982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.981210][ T29] audit: type=1804 audit(1783338163.782:13): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.18110" name="/newroot/3761/memory.events" dev="tmpfs" ino=18890 res=1 errno=0 [ 790.006015][ T29] audit: type=1800 audit(1783338163.812:14): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18110" name="memory.events" dev="tmpfs" ino=18890 res=0 errno=0 [ 790.053029][ T29] audit: type=1804 audit(1783338163.812:15): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.18110" name="/newroot/3761/memory.events" dev="tmpfs" ino=18890 res=1 errno=0 [ 790.077144][ T29] audit: type=1804 audit(1783338163.852:16): pid=11997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.18113" name="/newroot/3538/memory.events" dev="tmpfs" ino=17771 res=1 errno=0 [ 790.137960][T11998] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18114'. [ 790.393298][T12017] IPVS: Scheduler module ip_vs_sip not found [ 790.680610][T12036] sctp: [Deprecated]: syz.0.18129 (pid 12036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.680610][T12036] Use struct sctp_sack_info instead [ 790.708081][T12036] sctp: [Deprecated]: syz.0.18129 (pid 12036) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.708081][T12036] Use struct sctp_sack_info instead [ 790.934351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.963737][T12053] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18136'. [ 791.011064][T10296] tipc: Subscription rejected, illegal request [ 791.413021][T12081] syzkaller1: entered promiscuous mode [ 791.427067][T12081] syzkaller1: entered allmulticast mode [ 791.568736][T12087] syzkaller1: entered promiscuous mode [ 791.592002][T12087] syzkaller1: entered allmulticast mode [ 791.974363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.796617][T12149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18178'. [ 792.816910][T12149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18178'. [ 792.959186][T12158] syzkaller1: entered promiscuous mode [ 792.965820][T12158] syzkaller1: entered allmulticast mode [ 792.981644][T12161] netlink: 566 bytes leftover after parsing attributes in process `syz.3.18184'. [ 793.014586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.466486][T12187] netlink: 8772 bytes leftover after parsing attributes in process `syz.1.18195'. [ 794.054270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.311328][T12239] netlink: 'syz.1.18219': attribute type 1 has an invalid length. [ 794.379204][T12239] bond3: entered promiscuous mode [ 794.405785][T12239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 794.446008][T12242] 8021q: adding VLAN 0 to HW filter on device bond4 [ 794.457063][T12242] bond3: (slave bond4): making interface the new active one [ 794.468903][T12242] bond4: entered promiscuous mode [ 794.493189][T12242] bond3: (slave bond4): Enslaving as an active interface with an up link [ 795.094388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.179853][T12290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18243'. [ 795.565867][T12316] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18253'. [ 795.878673][T12333] x_tables: duplicate entry at hook 1 [ 796.134540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.345115][T12369] netlink: 116 bytes leftover after parsing attributes in process `syz.0.18277'. [ 796.780379][T12389] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 796.807238][T12389] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 797.174337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.509968][T12434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18305'. [ 797.534460][T12434] netlink: 'syz.2.18305': attribute type 10 has an invalid length. [ 797.553627][T12434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18305'. [ 798.117435][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18314'. [ 798.214241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.237277][T12457] veth0: entered promiscuous mode [ 798.260356][T12424] lo speed is unknown, defaulting to 1000 [ 798.268541][T12454] veth0: left promiscuous mode [ 798.778298][T12471] gtp2: entered promiscuous mode [ 798.788807][T12471] gtp2: entered allmulticast mode [ 799.254503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.441246][T12494] pim6reg1: entered promiscuous mode [ 799.464264][T12494] pim6reg1: entered allmulticast mode [ 799.557253][T12501] hsr0: entered promiscuous mode [ 800.294329][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.321282][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.334267][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.354806][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.395661][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.409046][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.455639][T12550] lo speed is unknown, defaulting to 1000 [ 801.575758][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18372'. [ 801.769987][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18377'. [ 801.818919][T12597] ip6gre3: entered promiscuous mode [ 801.837686][T12597] ip6gre3: entered allmulticast mode [ 801.989077][T12604] syzkaller1: entered promiscuous mode [ 801.995658][T12604] syzkaller1: entered allmulticast mode [ 802.015355][ T1105] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 802.028686][ T1105] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 802.045641][ T5627] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 802.445363][T12620] netlink: 'syz.4.18388': attribute type 1 has an invalid length. [ 802.467506][T12620] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18388'. [ 802.494475][ T5627] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 802.564482][ T5627] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 802.599575][T12623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18389'. [ 802.618951][T12623] batadv_slave_0: entered promiscuous mode [ 802.907558][T12606] lo speed is unknown, defaulting to 1000 [ 803.402021][T12658] netlink: 52 bytes leftover after parsing attributes in process `syz.0.18404'. [ 803.436040][T12658] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.609522][T12668] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.633922][T12668] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 803.665036][T12668] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 803.849367][T12668] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.889542][T12668] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 803.913912][T12668] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 803.925535][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18413'. [ 803.957518][ T1105] batman_adv: batadv1: IGMP Querier appeared [ 803.965180][ T1105] batman_adv: batadv1: MLD Querier appeared [ 804.041991][T12668] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.055835][T12668] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 804.066524][T12668] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 804.183451][T12668] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 804.214629][T12668] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 804.229989][T12668] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 804.251709][T12698] netlink: 'syz.2.18420': attribute type 2 has an invalid length. [ 804.348409][ T1105] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.363547][ T1105] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 804.373442][ T1105] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 804.398998][ T1105] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.408877][ T1105] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 804.417852][ T1105] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 804.478041][ T1105] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.492400][ T1105] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 804.501121][ T1105] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 804.516080][ T147] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 804.525659][ T147] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 804.534050][ T147] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 805.814488][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 806.262879][T12775] tun0: tun_chr_ioctl cmd 1074025675 [ 806.276957][T12775] tun0: persist enabled [ 806.295556][T12775] tun0: tun_chr_ioctl cmd 1074025675 [ 806.300914][T12775] tun0: persist disabled [ 806.553955][T12788] xt_hashlimit: size too large, truncated to 1048576 [ 806.993562][T12802] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18468'. [ 807.429603][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18478'. [ 807.459542][T12822] netlink: 'syz.1.18478': attribute type 10 has an invalid length. [ 807.480688][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18478'. [ 807.572146][T12822] geneve4: entered promiscuous mode [ 807.585584][T12822] geneve4: entered allmulticast mode [ 807.624513][T12830] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18481'. [ 808.104789][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18494'. [ 808.114031][T12858] netlink: 'syz.3.18494': attribute type 10 has an invalid length. [ 808.142614][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18494'. [ 808.229421][T12864] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18496'. [ 808.536165][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.958607][T12913] syzkaller1: entered promiscuous mode [ 808.970892][T12913] syzkaller1: entered allmulticast mode [ 809.549785][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18534'. [ 809.581185][T12953] netlink: 84 bytes leftover after parsing attributes in process `syz.4.18536'. [ 809.596673][T12953] netlink: 88 bytes leftover after parsing attributes in process `syz.4.18536'. [ 809.951671][T12938] lo speed is unknown, defaulting to 1000 [ 810.313972][T12973] batadv_slave_0: entered promiscuous mode [ 810.333558][T12972] batadv_slave_0: left promiscuous mode [ 810.336839][T18271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.517556][ T14] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 810.526425][ T14] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 810.596842][ T14] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 810.613665][ T14] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 811.414261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.427100][T13033] syzkaller1: entered promiscuous mode [ 811.444578][T13033] syzkaller1: entered allmulticast mode [ 811.572780][T13038] : left allmulticast mode [ 811.602726][T13038] : left promiscuous mode [ 811.611975][T13038] bridge0: port 1(1) entered disabled state [ 811.658837][T13038] .`: (slave bond_slave_0): Releasing backup interface [ 811.703313][T13038] .`: (slave bond_slave_1): Releasing backup interface [ 811.790097][T13038] team0: Port device team_slave_0 removed [ 811.823318][T13038] team0: Port device 76žÿ removed [ 811.851037][T13038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.864279][T13038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.891664][T13038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.919592][T13038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.979670][ T7671] syz0: Port: 1 Link DOWN [ 812.454334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.549281][T13069] __nla_validate_parse: 5 callbacks suppressed [ 812.549300][T13069] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.18585'. [ 812.627054][T13030] lo speed is unknown, defaulting to 1000 [ 812.714806][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.005329][T13084] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18592'. [ 813.097870][T13048] lo speed is unknown, defaulting to 1000 [ 813.188994][ T5622] cgroup: fork rejected by pids controller in /syz3 [ 813.494495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.654387][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 813.662945][ T5781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.185740][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 814.209889][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 814.219460][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 814.227649][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 814.238954][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 814.534240][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.165657][T13123] lo speed is unknown, defaulting to 1000 [ 815.574227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.724563][T13126] lo speed is unknown, defaulting to 1000 [ 816.294915][ T5638] Bluetooth: hci2: command tx timeout [ 816.614443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.772247][T13126] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.780241][T13126] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.787802][T13126] bridge_slave_0: entered allmulticast mode [ 816.797183][T13126] bridge_slave_0: entered promiscuous mode [ 816.805869][T13126] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.813096][T13126] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.820689][T13126] bridge_slave_1: entered allmulticast mode [ 816.828344][T13126] bridge_slave_1: entered promiscuous mode [ 816.872525][T13126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.885237][T13126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.944874][T13126] team0: Port device team_slave_0 added [ 816.967736][T13126] team0: Port device team_slave_1 added [ 816.980742][T13187] netlink: 236 bytes leftover after parsing attributes in process `syz.1.18625'. [ 817.003562][T13187] netlink: 236 bytes leftover after parsing attributes in process `syz.1.18625'. [ 817.038041][T13126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.058989][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.087184][T13126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.102282][T13126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.110721][T13126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 817.139059][T13126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.177559][T13192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18628'. [ 817.226847][T13126] hsr_slave_0: entered promiscuous mode [ 817.233797][T13126] hsr_slave_1: entered promiscuous mode [ 817.307565][T13194] xt_hashlimit: size too large, truncated to 1048576 [ 817.654295][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.284937][T13237] sctp: [Deprecated]: syz.0.18647 (pid 13237) Use of struct sctp_assoc_value in delayed_ack socket option. [ 818.284937][T13237] Use struct sctp_sack_info instead [ 818.377957][ T5638] Bluetooth: hci2: command tx timeout [ 818.411115][T13126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 818.505238][T13126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 818.550190][T13241] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 818.573346][T13126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 818.584616][T13126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.599338][T13244] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 818.627507][T13126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 818.677165][T13126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.694227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.708099][T13126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 818.747494][T13126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 819.143935][T13126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.202813][T13126] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.243842][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.251139][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.311582][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.318822][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.692970][T13290] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18665'. [ 820.024034][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18667'. [ 820.188239][T13306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18667'. [ 820.230146][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18669'. [ 820.257254][T13309] netlink: 'syz.4.18669': attribute type 10 has an invalid length. [ 820.274589][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18669'. [ 820.443914][T13285] lo speed is unknown, defaulting to 1000 [ 820.454705][ T5638] Bluetooth: hci2: command tx timeout [ 820.520451][T13130] udevd[13130]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 820.567755][T13130] udevd[13130]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 820.730688][T13126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.949112][T13126] veth0_vlan: entered promiscuous mode [ 820.993974][T13126] veth1_vlan: entered promiscuous mode [ 821.123735][T13126] veth0_macvtap: entered promiscuous mode [ 821.176799][T13126] veth1_macvtap: entered promiscuous mode [ 821.247871][T13126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.297418][T13126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.344084][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.378851][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.407274][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.427705][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.707469][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.727067][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.840068][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.876756][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.081916][T13359] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18603'. [ 822.095030][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18689'. [ 822.415882][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18697'. [ 822.536467][ T5638] Bluetooth: hci2: command tx timeout [ 823.802673][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18720'. [ 823.837496][T13408] lo speed is unknown, defaulting to 1000 [ 824.534633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.836160][T13468] netlink: 240 bytes leftover after parsing attributes in process `syz.2.18734'. [ 825.350966][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18745'. [ 825.399227][T13496] smc: net device lo applied user defined pnetid SYZ2 [ 825.418545][T13496] smc: net device lo erased user defined pnetid SYZ2 [ 825.574520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.644401][T13493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.675347][T13448] lo speed is unknown, defaulting to 1000 [ 825.850528][T13493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.883695][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18756'. [ 825.920961][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18756'. [ 826.015130][T13493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.039952][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18758'. [ 826.238825][T13493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.511642][ T147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.561697][T10296] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.614247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.648905][T10296] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.760655][ T147] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.384733][T13562] pimreg: entered allmulticast mode [ 827.412468][T13562] pimreg: left allmulticast mode [ 827.654662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.778871][T13584] xt_hashlimit: size too large, truncated to 1048576 [ 828.223654][T13600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18789'. [ 828.246959][T13600] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18789'. [ 828.266310][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18789'. [ 828.430401][T13607] syzkaller1: entered promiscuous mode [ 828.452339][T13607] syzkaller1: entered allmulticast mode [ 828.694258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.925446][T13629] syzkaller1: entered promiscuous mode [ 828.931229][T13629] syzkaller1: entered allmulticast mode [ 829.102221][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18803'. [ 829.206240][T13635] syzkaller1: entered promiscuous mode [ 829.212009][T13635] syzkaller1: entered allmulticast mode [ 829.654347][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 829.734575][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.509549][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18825'. [ 830.774529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.814524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.855445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.937404][T13810] syzkaller1: entered promiscuous mode [ 832.943457][T13810] syzkaller1: entered allmulticast mode [ 833.177820][T13835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18879'. [ 833.204090][T13835] ipvlan1: entered promiscuous mode [ 833.217302][T13835] ipvlan1: left promiscuous mode [ 836.910764][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18897'. [ 836.994793][ T29] audit: type=1800 audit(1783338210.792:17): pid=13884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18899" name="memory.events" dev="tmpfs" ino=19789 res=0 errno=0 [ 837.559023][T13921] syzkaller1: entered promiscuous mode [ 837.578321][T13921] syzkaller1: entered allmulticast mode [ 838.253024][T13916] lo speed is unknown, defaulting to 1000 [ 838.423474][T13919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18912'. [ 838.678383][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18929'. [ 838.688625][T13956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18929'. [ 838.698152][T13956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18929'. [ 838.707711][T13956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18929'. [ 839.128568][T13966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.499168][T13977] netlink: 'syz.0.18938': attribute type 15 has an invalid length. [ 839.513691][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18938'. [ 839.549049][ T14] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 839.557653][T13977] netlink: 'syz.0.18938': attribute type 15 has an invalid length. [ 839.569084][ T14] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 839.580044][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18938'. [ 839.606264][ T14] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 839.616445][ T14] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 839.886631][T13996] ip6gre1: entered promiscuous mode [ 839.903825][T13996] ip6gre1: entered allmulticast mode [ 840.134302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.390823][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18957'. [ 840.523711][T14027] 8021q: adding VLAN 0 to HW filter on device bond2 [ 840.580054][T14035] bond2: option ad_select: unable to set because the bond device is up [ 841.174594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.256579][T14081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18981'. [ 841.482745][T14095] netlink: 'syz.3.18988': attribute type 4 has an invalid length. [ 841.612742][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802c0f8400: rx timeout, send abort [ 842.123935][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802c0f8400: abort rx timeout. Force session deactivation [ 842.214535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.923511][T14121] lo speed is unknown, defaulting to 1000 [ 842.959001][T14151] netlink: 'syz.3.19012': attribute type 21 has an invalid length. [ 842.975603][T14151] netlink: 'syz.3.19012': attribute type 22 has an invalid length. [ 842.991834][T14151] netlink: 'syz.3.19012': attribute type 23 has an invalid length. [ 843.010476][T14151] netlink: 'syz.3.19012': attribute type 25 has an invalid length. [ 843.028412][T14151] netlink: 'syz.3.19012': attribute type 26 has an invalid length. [ 843.044520][T14151] __nla_validate_parse: 2 callbacks suppressed [ 843.044535][T14151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19012'. [ 843.239891][T14164] netlink: 204 bytes leftover after parsing attributes in process `syz.3.19016'. [ 843.254484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.265157][T14164] netlink: 232 bytes leftover after parsing attributes in process `syz.3.19016'. [ 843.284072][T14166] netlink: 7 bytes leftover after parsing attributes in process `syz.1.19017'. [ 844.294350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.375092][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 845.266349][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19031'. [ 846.499150][T14285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19052'. [ 846.751388][T14293] syzkaller1: entered promiscuous mode [ 846.774612][T14293] syzkaller1: entered allmulticast mode [ 847.057873][T14306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19062'. [ 847.539053][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19072'. [ 848.344049][T14360] netlink: 27 bytes leftover after parsing attributes in process `syz.2.19086'. [ 849.378588][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19105'. [ 849.697783][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19111'. [ 850.106437][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19125'. [ 850.289221][T14447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.916073][T14467] netlink: 'syz.4.19133': attribute type 8 has an invalid length. [ 851.334263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.155310][T14530] bond8: option ad_select: invalid value (34) [ 852.164698][T14530] bond8 (unregistering): Released all slaves [ 852.374339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.578047][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19166'. [ 852.589690][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19166'. [ 852.707769][T14547] pim6reg1: entered promiscuous mode [ 852.721626][T14547] pim6reg1: entered allmulticast mode [ 853.341693][T14456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 853.414579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.786121][T14567] syzkaller1: entered promiscuous mode [ 853.799224][T14567] syzkaller1: entered allmulticast mode [ 854.051726][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19176'. [ 854.181789][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19179'. [ 854.213745][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19179'. [ 854.454248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.922006][T14599] netlink: 'syz.0.19190': attribute type 2 has an invalid length. [ 855.073634][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19192'. [ 855.494263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.534493][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.098244][T14693] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19233'. [ 857.108460][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19233'. [ 857.119994][T14693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19233'. [ 857.574230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.614259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.794549][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19252'. [ 858.808981][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19252'. [ 858.821964][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19252'. [ 859.820769][T14778] netlink: 'syz.2.19270': attribute type 14 has an invalid length. [ 859.847793][T14778] __nla_validate_parse: 12 callbacks suppressed [ 859.847812][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19270'. [ 859.889786][T14778] netlink: 'syz.2.19270': attribute type 14 has an invalid length. [ 859.907776][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19270'. [ 859.926681][T14781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19271'. [ 860.099692][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19276'. [ 860.938903][T14842] netlink: 148 bytes leftover after parsing attributes in process `syz.2.19295'. [ 861.016606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.054328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.934562][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 863.094270][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.548120][T14914] lo speed is unknown, defaulting to 1000 [ 863.613695][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19343'. [ 863.677967][T14987] 8021q: adding VLAN 0 to HW filter on device bond8 [ 863.715188][T14994] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 864.134526][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.203552][T15015] erspan0: entered promiscuous mode [ 864.210846][T15014] erspan0: left promiscuous mode [ 864.257376][T15017] netlink: 'syz.2.19355': attribute type 1 has an invalid length. [ 864.308893][T15017] bond9: entered promiscuous mode [ 864.321203][T15017] 8021q: adding VLAN 0 to HW filter on device bond9 [ 864.383212][T15023] bond9: (slave veth6): making interface the new active one [ 864.391348][T15023] veth6: entered promiscuous mode [ 864.402075][T15023] bond9: (slave veth6): Enslaving as an active interface with an up link [ 864.994027][T15053] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 865.045996][T15058] netlink: 'syz.1.19373': attribute type 22 has an invalid length. [ 865.089158][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19373'. [ 865.107648][T15058] netlink: 'syz.1.19373': attribute type 22 has an invalid length. [ 865.124662][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19373'. [ 865.174382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.271715][T15067] netlink: 'syz.4.19376': attribute type 13 has an invalid length. [ 865.302320][T15067] netlink: 'syz.4.19376': attribute type 13 has an invalid length. [ 866.214183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.381606][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19412'. [ 867.086614][T15168] lo speed is unknown, defaulting to 1000 [ 867.459141][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19436'. [ 867.919256][T15222] netlink: 104 bytes leftover after parsing attributes in process `syz.1.19447'. [ 868.783146][T15273] syzkaller1: entered promiscuous mode [ 868.791621][T15273] syzkaller1: entered allmulticast mode [ 868.928648][T15281] netlink: 'syz.3.19473': attribute type 1 has an invalid length. [ 868.936735][T15281] netlink: 'syz.3.19473': attribute type 4 has an invalid length. [ 868.946408][T15281] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.19473'. [ 868.966833][T15283] veth1_to_bond: entered allmulticast mode [ 868.980129][T15283] veth1_to_bond: entered promiscuous mode [ 868.993398][T15283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19474'. [ 869.011197][T15283] veth1_to_bond (unregistering): left allmulticast mode [ 869.019643][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19475'. [ 869.019836][T15283] veth1_to_bond (unregistering): left promiscuous mode [ 869.231760][T15294] netlink: 51 bytes leftover after parsing attributes in process `syz.3.19478'. [ 869.438861][ T7671] IPVS: starting estimator thread 0... [ 869.574213][T15303] IPVS: using max 28 ests per chain, 67200 per kthread [ 869.976101][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.732656][T15329] sctp: [Deprecated]: syz.2.19495 (pid 15329) Use of int in max_burst socket option. [ 870.732656][T15329] Use struct sctp_assoc_value instead [ 871.334400][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19507'. [ 871.846967][T15386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19519'. [ 871.870125][T15386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19519'. [ 871.900520][T15386] openvswitch: netlink: Actions may not be safe on all matching packets [ 872.765891][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19540'. [ 872.819834][T15442] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 873.399365][T15463] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 873.894282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.463770][T15518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19574'. [ 874.474683][T15518] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 874.575832][T15527] veth0: entered promiscuous mode [ 874.588924][T15527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19576'. [ 874.813523][T15535] ipip0: entered promiscuous mode [ 874.825180][T15535] ipip0: entered allmulticast mode [ 874.934213][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.011374][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19586'. [ 875.959740][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19606'. [ 875.974425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.009880][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19606'. [ 876.243022][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19606'. [ 876.856721][T15629] lo speed is unknown, defaulting to 1000 [ 877.014502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.480060][ T29] audit: type=1800 audit(1783338251.282:18): pid=15668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.19625" name="memory.events" dev="tmpfs" ino=19588 res=0 errno=0 [ 877.683393][T15682] bridge0: entered allmulticast mode [ 878.054370][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.012325][T15740] __nla_validate_parse: 1 callbacks suppressed [ 879.012345][T15740] netlink: 27 bytes leftover after parsing attributes in process `syz.3.19655'. [ 879.094462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.238098][T15744] netlink: 'syz.3.19658': attribute type 19 has an invalid length. [ 879.256766][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19658'. [ 879.296808][ T57] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.305496][T15744] netlink: 'syz.3.19658': attribute type 19 has an invalid length. [ 879.324388][ T57] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.324612][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19658'. [ 879.350828][ T57] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.385215][ T57] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 879.458903][T15754] netlink: 112 bytes leftover after parsing attributes in process `syz.2.19661'. [ 880.134244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.450792][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19686'. [ 880.471086][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19686'. [ 880.772017][T15813] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 880.789333][T15813] syzkaller1: Refused to change device type [ 881.107487][T15833] netlink: 'syz.3.19696': attribute type 13 has an invalid length. [ 881.174180][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.799147][T15868] netlink: 240 bytes leftover after parsing attributes in process `syz.3.19709'. [ 882.255830][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19718'. [ 882.360905][T15892] netlink: 'syz.4.19721': attribute type 21 has an invalid length. [ 882.369522][T15892] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19721'. [ 882.452756][T15898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19724'. [ 882.551695][T15903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.529224][T15939] ip6tnl0: Caught tx_queue_len zero misconfig [ 884.437658][T15981] __nla_validate_parse: 1 callbacks suppressed [ 884.437678][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19758'. [ 884.829472][T15996] netlink: 'syz.3.19764': attribute type 2 has an invalid length. [ 885.603342][T16030] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.614208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.681235][T16074] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19797'. [ 887.664299][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 887.684715][T16123] Bluetooth: hci1: too big key_count value 29096 [ 888.586582][T16147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19825'. [ 888.694547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.661858][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19843'. [ 889.744409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.784361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.824595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.147653][T16174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 892.147903][ T5638] Bluetooth: hci2: command 0x0405 tx timeout [ 892.502396][T16224] netlink: 51 bytes leftover after parsing attributes in process `syz.0.19857'. [ 892.870920][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 893.920340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.371826][T16234] team0: Device ipvlan2 failed to register rx_handler [ 894.826350][T16264] netlink: 'syz.3.19872': attribute type 13 has an invalid length. [ 894.936768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.540908][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806994a400: rx timeout, send abort [ 896.049229][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806994a400: abort rx timeout. Force session deactivation [ 896.053313][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19895'. [ 896.108498][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19895'. [ 896.186291][T16325] xt_hashlimit: size too large, truncated to 1048576 [ 896.660949][T16348] netlink: 'syz.0.19904': attribute type 13 has an invalid length. [ 896.954846][T16348] hsr0: left promiscuous mode [ 896.976845][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19908'. [ 897.046084][T18268] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 897.224842][ T5796] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 897.232983][T16355] veth1_to_bond: entered promiscuous mode [ 897.289114][T16358] veth1_to_bond (unregistering): left promiscuous mode [ 897.397419][T16362] syzkaller1: entered promiscuous mode [ 897.426774][T16362] syzkaller1: entered allmulticast mode [ 897.494436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.754669][ T5796] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 897.895207][ T5796] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 898.577253][T16429] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 899.026643][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19943'. [ 899.057874][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19943'. [ 899.072477][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19943'. [ 899.082619][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19943'. [ 900.467669][T16482] lo speed is unknown, defaulting to 1000 [ 900.515395][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19970'. [ 901.143953][T16520] bond5: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 901.185788][T16520] bond5 (unregistering): Released all slaves [ 901.580052][T16544] netlink: 'syz.0.19985': attribute type 1 has an invalid length. [ 901.672782][T16544] bond5: entered promiscuous mode [ 901.679683][T16544] bond5: entered allmulticast mode [ 901.705621][T16544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 901.833797][T16519] lo speed is unknown, defaulting to 1000 [ 902.394887][T16575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19996'. [ 903.169556][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20012'. [ 903.195400][T16610] netlink: 104 bytes leftover after parsing attributes in process `syz.1.20013'. [ 903.283642][T16612] syzkaller1: entered promiscuous mode [ 903.291315][T16612] syzkaller1: entered allmulticast mode [ 903.470564][T16622] netlink: 'syz.0.20019': attribute type 1 has an invalid length. [ 903.977464][T16653] syzkaller1: entered promiscuous mode [ 903.984745][T16653] syzkaller1: entered allmulticast mode [ 905.835244][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20092'. [ 905.865802][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20092'. [ 905.922278][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20092'. [ 905.951598][T16778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20092'. [ 906.389762][T16804] netlink: 'syz.1.20104': attribute type 7 has an invalid length. [ 906.460462][T16804] netlink: 'syz.1.20104': attribute type 7 has an invalid length. [ 906.594123][T16785] lo speed is unknown, defaulting to 1000 [ 906.623192][ T14] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 907.625821][T16850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20120'. [ 907.841226][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20128'. [ 907.850475][T16864] netlink: 'syz.0.20128': attribute type 9 has an invalid length. [ 908.100710][T16879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20135'. [ 909.025343][T16930] netlink: 'syz.0.20155': attribute type 1 has an invalid length. [ 909.062411][T16930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 910.916200][T16975] netlink: 'syz.1.20173': attribute type 8 has an invalid length. [ 910.931627][T16975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20173'. [ 910.960854][T16975] bond0: entered promiscuous mode [ 910.974428][T16975] bond0: left promiscuous mode [ 911.168324][T16983] syz_tun: entered allmulticast mode [ 911.197691][T16983] syz_tun (unregistering): left allmulticast mode [ 911.283937][ T29] audit: type=1800 audit(1783338285.082:19): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20179" name="r" dev="tmpfs" ino=21214 res=0 errno=0 [ 911.462900][T16900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 911.477507][T16968] netlink: 'syz.0.20170': attribute type 1 has an invalid length. [ 911.491853][T16968] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20170'. [ 911.516265][T16968] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 912.653285][T17067] netlink: 'syz.1.20214': attribute type 4 has an invalid length. [ 912.678033][T17069] netlink: 'syz.4.20215': attribute type 1 has an invalid length. [ 912.767694][T17069] 8021q: adding VLAN 0 to HW filter on device bond4 [ 912.822822][T17074] bond4: (slave gretap2): making interface the new active one [ 912.833100][T17074] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 913.172789][T17099] netlink: 'syz.1.20226': attribute type 10 has an invalid length. [ 913.195525][T17099] netlink: 'syz.1.20226': attribute type 10 has an invalid length. [ 913.304612][T17104] pim6reg1: entered promiscuous mode [ 913.310080][T17104] pim6reg1: entered allmulticast mode [ 914.072743][ T29] audit: type=1800 audit(1783338287.872:20): pid=17152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.20249" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1718 res=0 errno=0 [ 914.203760][T17159] sctp: [Deprecated]: syz.4.20251 (pid 17159) Use of struct sctp_assoc_value in delayed_ack socket option. [ 914.203760][T17159] Use struct sctp_sack_info instead [ 914.414287][T17168] lo: Caught tx_queue_len zero misconfig [ 914.622922][T17179] bridge1: entered promiscuous mode [ 914.631670][T17179] bridge1: entered allmulticast mode [ 914.657228][T17179] team0: Port device bridge1 added [ 914.680775][T17181] bridge0: port 3(team0) entered blocking state [ 914.695458][T17181] bridge0: port 3(team0) entered disabled state [ 914.707539][T17181] team0: entered allmulticast mode [ 914.712738][T17181] team_slave_0: entered allmulticast mode [ 914.719280][T17181] team_slave_1: entered allmulticast mode [ 914.744958][T17181] team0: entered promiscuous mode [ 914.750221][T17181] team_slave_0: entered promiscuous mode [ 914.756768][T17181] team_slave_1: entered promiscuous mode [ 914.767368][T17181] bridge0: port 3(team0) entered blocking state [ 914.775043][T17181] bridge0: port 3(team0) entered forwarding state [ 914.792184][T17184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20262'. [ 916.220464][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20283'. [ 917.110500][T17297] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 917.722332][T17310] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.742425][T17310] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 917.754496][T17310] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 917.768711][T17310] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 917.776066][T17316] netlink: 20 bytes leftover after parsing attributes in process `syz.3.20315'. [ 917.848150][T17310] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 917.864282][T17310] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 917.891701][T17310] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 917.914506][T17310] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 918.000332][T17310] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.012627][T17310] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 918.026471][T17310] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 918.038777][T17310] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 918.081578][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20323'. [ 918.091599][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20323'. [ 918.101206][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20323'. [ 918.111765][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20323'. [ 918.123869][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20323'. [ 918.136607][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20323'. [ 918.165013][T17310] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.187637][T17310] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 918.190500][T17338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20325'. [ 918.210745][T17338] netlink: 'syz.4.20325': attribute type 26 has an invalid length. [ 918.219439][T17310] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 918.219493][T17310] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 918.244410][T17338] netlink: 'syz.4.20325': attribute type 26 has an invalid length. [ 919.358571][T17396] netlink: 'syz.3.20344': attribute type 4 has an invalid length. [ 919.369657][T17396] netlink: 'syz.3.20344': attribute type 4 has an invalid length. [ 919.389958][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 920.288795][T17460] netlink: 'syz.4.20371': attribute type 1 has an invalid length. [ 920.332106][T17460] 8021q: adding VLAN 0 to HW filter on device bond5 [ 922.165233][T17389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 922.600467][T17504] xt_hashlimit: size too large, truncated to 1048576 [ 923.252471][T17537] veth0_macvtap: Caught tx_queue_len zero misconfig [ 923.266650][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 924.113736][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 924.190624][T17605] __nla_validate_parse: 3 callbacks suppressed [ 924.190641][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20416'. [ 924.721900][T17629] netlink: 'syz.4.20423': attribute type 7 has an invalid length. [ 924.739056][T17629] netlink: 'syz.4.20423': attribute type 7 has an invalid length. [ 924.822076][T17634] netlink: 'syz.3.20424': attribute type 1 has an invalid length. [ 924.906555][T17634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 925.415986][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 925.782445][T17673] A link change request failed with some changes committed already. Interface gre7 may have been left with an inconsistent configuration, please check. [ 926.017594][T17690] bridge8: entered promiscuous mode [ 926.026468][T17690] bridge8: entered allmulticast mode [ 926.050578][T17693] bridge0: entered allmulticast mode [ 926.285051][T17709] netlink: 'syz.2.20449': attribute type 1 has an invalid length. [ 926.352317][T17714] netlink: 52 bytes leftover after parsing attributes in process `syz.3.20452'. [ 926.418611][T17709] 8021q: adding VLAN 0 to HW filter on device bond10 [ 926.426267][T17711] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 926.459608][T17711] bond5: (slave lo): Enslaving as an active interface with an up link [ 926.468882][T17711] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 926.630685][T17727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20458'. [ 926.707725][ T5638] block nbd12: Receive control failed (result -32) [ 926.868274][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20462'. [ 926.898932][T17717] bond10: (slave veth8): Enslaving as a backup interface with a down link [ 926.937334][T17740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20462'. [ 928.345027][T17810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20489'. [ 928.368587][T17810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20489'. [ 928.378288][T17810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20489'. [ 928.390802][T17810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20489'. [ 929.580031][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20514'. [ 929.591621][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20514'. [ 929.601367][T17862] netlink: 'syz.1.20514': attribute type 6 has an invalid length. [ 929.609607][T17862] netlink: 'syz.1.20514': attribute type 5 has an invalid length. [ 929.619309][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20514'. [ 929.634017][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20514'. [ 929.651630][T17862] netlink: 'syz.1.20514': attribute type 6 has an invalid length. [ 929.677926][T17862] netlink: 'syz.1.20514': attribute type 5 has an invalid length. [ 930.500453][T17899] netlink: 80 bytes leftover after parsing attributes in process `syz.4.20529'. [ 930.606513][ T29] audit: type=1800 audit(1783338304.402:21): pid=17902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20530" name=20 dev="tmpfs" ino=20067 res=0 errno=0 [ 930.880644][T17913] netlink: 'syz.4.20534': attribute type 3 has an invalid length. [ 931.153211][T17929] block nbd0: NBD_DISCONNECT [ 931.414309][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 931.422709][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.548456][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20545'. [ 931.570884][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20545'. [ 931.580343][T17949] netlink: 'syz.0.20545': attribute type 7 has an invalid length. [ 931.590678][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20545'. [ 931.600087][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20545'. [ 931.609496][T17949] netlink: 'syz.0.20545': attribute type 7 has an invalid length. [ 931.866759][T17967] dvmrp0: left allmulticast mode [ 931.973078][T17970] netlink: 'syz.3.20553': attribute type 3 has an invalid length. [ 932.059086][T17975] netlink: 'syz.1.20557': attribute type 1 has an invalid length. [ 932.088641][T17975] 8021q: adding VLAN 0 to HW filter on device bond6 [ 932.201177][T17986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20559'. [ 932.331167][T17995] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 933.168575][T18037] bond7: entered promiscuous mode [ 933.187780][T18037] 8021q: adding VLAN 0 to HW filter on device bond7 [ 933.757987][T18039] 8021q: adding VLAN 0 to HW filter on device bond7 [ 933.765157][T18039] bond7: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 933.776441][T18039] bond7: (slave ip6gre1): Error -95 calling set_mac_address [ 934.352948][T18066] block nbd0: server does not support multiple connections per device. [ 934.382503][T18066] block nbd0: shutting down sockets [ 935.879823][T18116] sctp: [Deprecated]: syz.0.20613 (pid 18116) Use of int in maxseg socket option. [ 935.879823][T18116] Use struct sctp_assoc_value instead [ 937.952687][T18139] __nla_validate_parse: 2 callbacks suppressed [ 937.952704][T18139] netlink: 36764 bytes leftover after parsing attributes in process `syz.3.20615'. [ 938.053131][T18114] netlink: 76 bytes leftover after parsing attributes in process `syz.2.20605'. [ 938.374014][T18156] syzkaller1: entered promiscuous mode [ 938.381474][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20625'. [ 938.385114][T18156] syzkaller1: entered allmulticast mode [ 938.532464][T18159] bond6: entered promiscuous mode [ 938.561009][T18159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 938.656716][T18167] 8021q: adding VLAN 0 to HW filter on device bond6 [ 938.674711][T18167] bond6: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 938.707588][T18167] bond6: (slave ip6gre4): Error -95 calling set_mac_address [ 939.603662][T18209] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20634'. [ 939.790375][T18220] lo: Caught tx_queue_len zero misconfig [ 940.167210][T10306] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 940.562193][ T29] audit: type=1800 audit(1783338314.362:22): pid=18275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.20651" name=20 dev="tmpfs" ino=21034 res=0 errno=0 [ 940.706938][T18288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.720275][T18288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.837063][T18294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20655'. [ 942.942219][T18339] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 943.060751][T18235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 943.170441][T18347] gretap2: entered promiscuous mode [ 943.205153][T18349] syzkaller1: entered promiscuous mode [ 943.210890][T18349] syzkaller1: entered allmulticast mode [ 943.592775][T18299] lo speed is unknown, defaulting to 1000 [ 943.620143][T18366] sctp: [Deprecated]: syz.1.20679 (pid 18366) Use of int in max_burst socket option deprecated. [ 943.620143][T18366] Use struct sctp_assoc_value instead [ 944.105399][T18384] sit0: entered promiscuous mode [ 944.124301][T18384] netlink: 'syz.1.20687': attribute type 1 has an invalid length. [ 944.144101][T18384] netlink: 1 bytes leftover after parsing attributes in process `syz.1.20687'. [ 944.688397][T18400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20694'. [ 944.770537][T18400] 8021q: adding VLAN 0 to HW filter on device bond7 [ 944.830908][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20694'. [ 944.867364][T18404] 8021q: adding VLAN 0 to HW filter on device bond8 [ 944.879952][T18404] bond7: (slave bond8): Enslaving as an active interface with an up link [ 944.924593][T18400] bond7 (unregistering): (slave bond8): Releasing backup interface [ 944.943572][T18400] bond7 (unregistering): Released all slaves [ 944.976389][T18387] lo speed is unknown, defaulting to 1000 [ 946.952835][T18461] lo speed is unknown, defaulting to 1000 [ 947.410265][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20727'. [ 947.419124][T18497] netlink: 'syz.0.20726': attribute type 1 has an invalid length. [ 947.436163][T18497] netlink: 224 bytes leftover after parsing attributes in process `syz.0.20726'. [ 949.689365][T18576] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.20756'. [ 950.126364][T18569] lo speed is unknown, defaulting to 1000 [ 950.474964][T18607] netlink: 32 bytes leftover after parsing attributes in process `syz.0.20767'. [ 952.431637][T18678] syzkaller0: entered promiscuous mode [ 952.438583][T18678] syzkaller0: entered allmulticast mode [ 953.013410][T18679] lo speed is unknown, defaulting to 1000 [ 953.602780][T18714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20808'. [ 953.659550][T18714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20808'. [ 953.853889][T18723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20811'. [ 953.971375][T18723] 8021q: adding VLAN 0 to HW filter on device bond8 [ 953.993828][T18731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20811'. [ 954.062568][T18726] 8021q: adding VLAN 0 to HW filter on device bond9 [ 954.081379][T18726] bond8: (slave bond9): Enslaving as an active interface with an up link [ 954.135703][T18731] bond8 (unregistering): (slave bond9): Releasing backup interface [ 954.162312][T18731] bond8 (unregistering): Released all slaves [ 954.328057][T18745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.20820'. [ 956.246972][T18800] lo speed is unknown, defaulting to 1000 [ 957.610802][T18822] lo speed is unknown, defaulting to 1000 [ 958.029235][T18829] lo speed is unknown, defaulting to 1000 [ 959.820035][T18933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20890'. [ 959.940143][T18939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20890'. [ 960.761538][T18933] 8021q: adding VLAN 0 to HW filter on device bond7 [ 960.789679][T18928] bridge2: entered promiscuous mode [ 960.803239][T18928] bridge2: entered allmulticast mode [ 960.821082][T18935] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 960.841066][T18939] bond7 (unregistering): Released all slaves [ 960.951778][T18979] netlink: 'syz.3.20896': attribute type 1 has an invalid length. [ 961.060178][T18979] gretap1: entered allmulticast mode [ 961.070173][T18979] bond2: (slave gretap1): making interface the new active one [ 961.079479][T18979] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 961.350119][T18994] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 961.626685][T18990] lo speed is unknown, defaulting to 1000 [ 962.763109][T19042] netlink: 192 bytes leftover after parsing attributes in process `syz.0.20919'. [ 962.778537][T19042] netlink: 192 bytes leftover after parsing attributes in process `syz.0.20919'. [ 962.918353][T19050] team0: left allmulticast mode [ 962.936894][T19050] team_slave_0: left allmulticast mode [ 962.946986][T19050] team_slave_1: left allmulticast mode [ 962.952574][T19050] team0: left promiscuous mode [ 962.957694][T19050] team_slave_0: left promiscuous mode [ 962.963314][T19050] team_slave_1: left promiscuous mode [ 962.969807][T19050] bridge0: port 3(team0) entered disabled state [ 962.986066][T19050] bridge_slave_0: left allmulticast mode [ 962.991826][T19050] bridge_slave_0: left promiscuous mode [ 962.998272][T19050] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.030911][T19050] bridge_slave_1: left allmulticast mode [ 963.037265][T19050] bridge_slave_1: left promiscuous mode [ 963.043605][T19050] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.062917][T19050] bond0: (slave bond_slave_0): Releasing backup interface [ 963.082135][T19050] bond0: (slave bond_slave_1): Releasing backup interface [ 963.111135][T19050] team0: Port device team_slave_0 removed [ 963.134791][T19050] team0: Port device team_slave_1 removed [ 963.150560][T19050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.158592][T19050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.167812][T19050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.176255][T19050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.188145][T19050] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 963.346768][T19067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20931'. [ 963.362049][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20929'. [ 963.386938][T19068] netlink: 'syz.1.20929': attribute type 11 has an invalid length. [ 963.485497][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20929'. [ 963.497984][T19015] lo speed is unknown, defaulting to 1000 [ 963.504457][T19068] netlink: 'syz.1.20929': attribute type 11 has an invalid length. [ 963.576576][ T57] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 964.305516][T19074] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 964.405242][T19099] netlink: 'syz.0.20942': attribute type 1 has an invalid length. [ 964.423466][T19099] netlink: 'syz.0.20942': attribute type 4 has an invalid length. [ 964.444167][T19099] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.20942'. [ 964.705266][T19107] syzkaller1: entered promiscuous mode [ 964.711469][T19107] syzkaller1: entered allmulticast mode [ 964.790772][T19111] netlink: 'syz.3.20947': attribute type 3 has an invalid length. [ 964.880677][T19114] IPVS: persistence engine module ip_vs_pe_À not found [ 965.183699][T19128] netlink: 'syz.3.20954': attribute type 3 has an invalid length. [ 965.191710][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20954'. [ 965.325464][T19130] team0: Port device syz_tun added [ 965.480485][T19133] only policy match revision 0 supported [ 965.480507][T19133] unable to load match [ 965.680764][T19142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20960'. [ 965.704282][T19142] netlink: 'syz.1.20960': attribute type 5 has an invalid length. [ 965.713724][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20960'. [ 965.733696][T19142] geneve4: entered promiscuous mode [ 965.740166][T19142] geneve4: entered allmulticast mode [ 965.746893][T10296] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 46497 - 0 [ 965.756031][T10296] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 46497 - 0 [ 965.765351][T10296] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 46497 - 0 [ 965.786306][ T14] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 46497 - 0 [ 965.882909][T19153] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20964'. [ 966.047848][T19161] netlink: 2736 bytes leftover after parsing attributes in process `syz.3.20967'. [ 966.959337][T19185] erspan0: left promiscuous mode [ 966.983836][T19185] erspan0: left allmulticast mode [ 966.994718][T19185] sit0: left promiscuous mode [ 967.009514][T19185] veth1_to_hsr: left promiscuous mode [ 967.024769][T19185] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 967.031978][T19185] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 967.041757][T19185] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 967.048683][T19185] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 967.059524][T19185] ipip1: left promiscuous mode [ 967.065182][T19185] gre2: left allmulticast mode [ 967.070274][T19185] ip6tnl7: left allmulticast mode [ 967.078356][T19185] veth3: left promiscuous mode [ 967.150441][T19185] bond3: left promiscuous mode [ 967.159977][T19185] bond4: left promiscuous mode [ 967.300034][T19185] bridge8: left promiscuous mode [ 967.312486][T19185] bridge8: left allmulticast mode [ 967.342118][T19185] gretap2: left promiscuous mode [ 967.442086][T19185] geneve4: left promiscuous mode [ 967.458007][T19185] geneve4: left allmulticast mode [ 967.473390][ T57] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.493016][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 967.493164][T19203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20981'. [ 967.517853][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 46497 - 0 [ 967.540354][ T57] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.562814][ T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 967.584979][ T57] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 46497 - 0 [ 967.669031][ T57] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.688297][ T57] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 967.720359][ T57] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 46497 - 0 [ 967.730013][ T57] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.748364][ T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 967.758004][ T57] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 46497 - 0 [ 967.856050][T19214] tipc: Failed to remove unknown binding: 66,1,1/0:2028387898/2028387900 [ 967.866472][T19216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20987'. [ 967.868119][T19214] tipc: Failed to remove unknown binding: 66,1,1/0:2028387898/2028387900 [ 968.008732][T19221] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 968.591371][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21008'. [ 968.946264][T19283] tipc: Failed to remove unknown binding: 66,1,1/0:1882165294/1882165296 [ 969.539160][T19321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21032'. [ 969.801798][T19334] netlink: 'syz.3.21037': attribute type 4 has an invalid length. [ 969.852129][T19337] netlink: 'syz.3.21037': attribute type 4 has an invalid length. [ 970.027236][T19347] netlink: 8752 bytes leftover after parsing attributes in process `syz.4.21042'. [ 970.302279][T19360] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 970.340862][T19360] netdevsim netdevsim3 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 970.353935][T19360] 8021q: adding VLAN 0 to HW filter on device eth0 [ 970.369007][T19360] netdevsim netdevsim3 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 970.383790][T19360] 8021q: adding VLAN 0 to HW filter on device eth1 [ 970.395208][T19360] netdevsim netdevsim3 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 970.406221][T19360] 8021q: adding VLAN 0 to HW filter on device eth2 [ 970.415892][T19360] netdevsim netdevsim3 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 970.427235][T19360] 8021q: adding VLAN 0 to HW filter on device eth3 [ 970.464435][T18279] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 970.485496][T19360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 971.426747][ T5757] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 971.943748][T19393] __nla_validate_parse: 1 callbacks suppressed [ 971.943769][T19393] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21059'. [ 973.568016][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21064'. [ 973.600612][T19403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21064'. [ 974.003156][T19421] xt_hashlimit: size too large, truncated to 1048576 [ 974.187879][T19433] veth0_to_bond: Caught tx_queue_len zero misconfig [ 974.766647][T19436] lo speed is unknown, defaulting to 1000 [ 975.198359][T19466] netlink: 'syz.4.21088': attribute type 1 has an invalid length. [ 975.565828][T19474] netlink: 'syz.0.21089': attribute type 4 has an invalid length. [ 975.589965][T19444] bond9: (slave veth6): Releasing backup interface [ 975.609945][T19444] veth6: left promiscuous mode [ 975.617084][T19475] netlink: 'syz.0.21089': attribute type 4 has an invalid length. [ 975.639677][T19444] bond10: (slave veth8): Releasing backup interface [ 975.722807][T19466] 8021q: adding VLAN 0 to HW filter on device bond7 [ 975.936260][T19485] netlink: 'syz.0.21092': attribute type 4 has an invalid length. [ 975.989491][T19486] netlink: 'syz.0.21092': attribute type 4 has an invalid length. [ 976.260399][T19493] gretap3: entered promiscuous mode [ 976.371908][T19496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21096'. [ 976.391141][T19496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21096'. [ 976.467441][T19500] bond0: entered promiscuous mode [ 976.479665][T19500] batadv0: entered promiscuous mode [ 976.486620][T19500] debugfs: 'hsr0' already exists in 'hsr' [ 976.493018][T19500] Cannot create hsr debugfs directory [ 976.499224][T19500] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 976.510977][T19500] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 976.527496][T19500] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 976.540740][T19500] bond0: left promiscuous mode [ 976.550802][T19500] batadv0: left promiscuous mode [ 976.947867][T19512] syzkaller1: entered promiscuous mode [ 976.976264][T19512] syzkaller1: entered allmulticast mode [ 977.119329][T19518] GUP no longer grows the stack in syz.4.21106 (19518): 200000003000-20000000a000 (200000001000) [ 977.131251][T19518] CPU: 1 UID: 0 PID: 19518 Comm: syz.4.21106 Not tainted syzkaller #0 PREEMPT(full) [ 977.131305][T19518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 977.131342][T19518] Call Trace: [ 977.131351][T19518] [ 977.131359][T19518] dump_stack_lvl+0xe8/0x150 [ 977.131460][T19518] __get_user_pages+0x238c/0x2720 [ 977.131522][T19518] ? __gup_longterm_locked+0xc3b/0x15c0 [ 977.131573][T19518] __gup_longterm_locked+0xd52/0x15c0 [ 977.131597][T19518] ? lock_acquire+0x106/0x350 [ 977.131668][T19518] gup_fast_fallback+0x1d8c/0x20e0 [ 977.131723][T19518] ? __pfx_gup_fast_fallback+0x10/0x10 [ 977.131746][T19518] ? is_valid_gup_args+0x11f/0x200 [ 977.131769][T19518] ? get_user_pages_fast+0x4d/0xb0 [ 977.131790][T19518] __iov_iter_get_pages_alloc+0x378/0xa40 [ 977.131922][T19518] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 977.131968][T19518] iov_iter_get_pages2+0x5e/0xa0 [ 977.131999][T19518] __se_sys_vmsplice+0x7b5/0x1660 [ 977.132049][T19518] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 977.132078][T19518] ? __pfx_futex_wait+0x10/0x10 [ 977.132189][T19518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.132227][T19518] do_syscall_64+0x174/0x580 [ 977.132358][T19518] ? trace_irq_disable+0x3b/0x140 [ 977.132389][T19518] ? clear_bhb_loop+0x40/0x90 [ 977.132414][T19518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.132434][T19518] RIP: 0033:0x7f31b779de59 [ 977.132452][T19518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.132469][T19518] RSP: 002b:00007f31b85eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 977.132490][T19518] RAX: ffffffffffffffda RBX: 00007f31b7a25fa0 RCX: 00007f31b779de59 [ 977.132503][T19518] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 977.132515][T19518] RBP: 00007f31b7833e6f R08: 0000000000000000 R09: 0000000000000000 [ 977.132526][T19518] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 977.132537][T19518] R13: 00007f31b7a26038 R14: 00007f31b7a25fa0 R15: 00007ffe367a9a28 [ 977.132567][T19518] [ 977.601645][T19527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21109'. [ 977.636241][T19527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21109'. [ 977.822170][T19539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21114'. [ 978.399807][T19565] bridge15: entered promiscuous mode [ 978.406533][T19565] bridge15: entered allmulticast mode [ 978.700931][T19583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21132'. [ 981.230024][T19641] tipc: Started in network mode [ 981.244245][T19641] tipc: Node identity ac1414aa, cluster identity 4711 [ 981.254959][T19641] tipc: Enabled bearer , priority 10 [ 981.276531][T19643] tipc: Failed to remove unknown binding: 66,1,1/16966:2125121835/2125121837 [ 982.374190][T18279] tipc: Node number set to 2886997162 [ 982.433484][T19596] lo speed is unknown, defaulting to 1000 [ 983.632414][T19678] bridge11: entered promiscuous mode [ 983.640218][T19678] bridge11: entered allmulticast mode [ 985.514617][T19722] pim6reg1: entered promiscuous mode [ 985.520033][T19722] pim6reg1: entered allmulticast mode [ 985.856596][T19733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21182'. [ 985.881106][T19733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21182'. [ 986.223643][T19743] sock: sock_set_timeout: `syz.0.21185' (pid 19743) tries to set negative timeout [ 988.163777][T19808] syzkaller1: entered promiscuous mode [ 988.176744][T19808] syzkaller1: entered allmulticast mode [ 988.319983][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21205'. [ 988.347705][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21205'. [ 988.375832][T19812] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 988.502951][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21210'. [ 988.527281][T19825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21210'. [ 988.668456][T19831] syzkaller1: entered promiscuous mode [ 988.674307][T19831] syzkaller1: entered allmulticast mode [ 988.695461][T19816] lo speed is unknown, defaulting to 1000 [ 989.013721][T19844] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 989.273390][T19858] netlink: 'syz.0.21225': attribute type 1 has an invalid length. [ 989.506778][T19858] bond8: entered promiscuous mode [ 989.529885][T19858] 8021q: adding VLAN 0 to HW filter on device bond8 [ 989.599268][T19870] netlink: 52 bytes leftover after parsing attributes in process `syz.4.21230'. [ 989.652508][T19874] netlink: 52 bytes leftover after parsing attributes in process `syz.4.21230'. [ 989.717775][T19865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 989.724832][T19865] bond8: (slave gre3): The slave device specified does not support setting the MAC address [ 989.735402][T19865] bond8: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 989.750745][T19865] bond8: (slave gre3): making interface the new active one [ 989.768276][T19865] gre3: entered promiscuous mode [ 989.776341][T19865] bond8: (slave gre3): Enslaving as an active interface with an up link [ 990.267902][T19857] lo speed is unknown, defaulting to 1000 [ 990.319218][T19900] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 990.470426][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21242'. [ 990.489758][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21242'. [ 992.186413][T20000] sctp: [Deprecated]: syz.3.21281 (pid 20000) Use of int in maxseg socket option. [ 992.186413][T20000] Use struct sctp_assoc_value instead [ 992.855639][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.238990][T20034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21294'. [ 993.248598][T20034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21294'. [ 993.279722][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21294'. [ 993.315727][T20034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21294'. [ 993.899317][T20043] lo speed is unknown, defaulting to 1000 [ 994.346848][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21304'. [ 994.750419][T20068] netlink: 121 bytes leftover after parsing attributes in process `syz.0.21304'. [ 996.132741][T20094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 999.308229][T20108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1000.579304][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21338'. [ 1002.316117][T20201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21351'. [ 1002.327960][T20201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21351'. [ 1002.474955][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21353'. [ 1002.484971][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21353'. [ 1002.495270][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21353'. [ 1002.509019][T20205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21353'. [ 1002.702731][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21361'. [ 1002.959551][T20235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21366'. [ 1003.285015][T20231] lo speed is unknown, defaulting to 1000 [ 1003.489055][T20242] "syz.0.21370" (20242) uses obsolete ecb(arc4) skcipher [ 1003.711138][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21372'. [ 1003.815907][T20248] gretap3: left promiscuous mode [ 1003.843390][T20248] bridge11: left promiscuous mode [ 1003.860956][T20248] bridge11: left allmulticast mode [ 1005.048780][T20301] syzkaller1: entered promiscuous mode [ 1005.057908][T20301] syzkaller1: entered allmulticast mode [ 1006.110242][T20342] netlink: 'syz.3.21405': attribute type 1 has an invalid length. [ 1006.128292][T20342] netlink: 'syz.3.21405': attribute type 4 has an invalid length. [ 1006.145047][T20342] __nla_validate_parse: 1 callbacks suppressed [ 1006.145063][T20342] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.21405'. [ 1006.262468][T20331] syzkaller1: entered promiscuous mode [ 1006.268672][T20331] syzkaller1: entered allmulticast mode [ 1006.346957][T20353] syzkaller1: entered promiscuous mode [ 1006.352505][T20353] syzkaller1: entered allmulticast mode [ 1007.077757][T20380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21420'. [ 1008.010995][T20406] netlink: 'syz.2.21423': attribute type 1 has an invalid length. [ 1008.021004][T20406] netlink: 'syz.2.21423': attribute type 1 has an invalid length. [ 1008.081941][T20408] syzkaller1: entered promiscuous mode [ 1008.096656][T20408] syzkaller1: entered allmulticast mode [ 1008.660704][ T5638] Bluetooth: hci2: link tx timeout [ 1008.674624][ T5638] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1009.951356][T20462] lo speed is unknown, defaulting to 1000 [ 1010.095615][T20484] syzkaller1: entered promiscuous mode [ 1010.105033][T20484] syzkaller1: entered allmulticast mode [ 1010.315022][T20498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21464'. [ 1010.459669][T20508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21464'. [ 1010.695514][ T5638] Bluetooth: hci2: command 0x0405 tx timeout [ 1010.945848][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880260e1000: rx timeout, send abort [ 1010.954766][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880260e1000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1011.203430][T20537] sctp: [Deprecated]: syz.0.21480 (pid 20537) Use of int in max_burst socket option. [ 1011.203430][T20537] Use struct sctp_assoc_value instead [ 1011.665168][T20555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21486'. [ 1012.000972][T20576] netlink: 56 bytes leftover after parsing attributes in process `syz.0.21493'. [ 1012.093360][T20583] netlink: 'syz.4.21497': attribute type 1 has an invalid length. [ 1012.128263][T20583] bond9: entered promiscuous mode [ 1012.133872][T20583] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1012.222838][T20583] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1012.244815][T20583] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 1012.275624][T20583] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1012.311754][T20583] bond9: (slave vti0): making interface the new active one [ 1012.320438][T20583] vti0: entered promiscuous mode [ 1012.326773][T20583] bond9: (slave vti0): Enslaving as an active interface with an up link [ 1013.601774][T20635] netlink: 'syz.3.21515': attribute type 1 has an invalid length. [ 1013.689343][T20635] bond3: entered promiscuous mode [ 1013.714786][T20635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1013.807752][T20646] netlink: 'syz.0.21517': attribute type 4 has an invalid length. [ 1013.848351][T20642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1013.878250][T20652] netlink: 'syz.0.21517': attribute type 4 has an invalid length. [ 1013.882317][T20642] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 1013.935067][T20642] bond3: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 1013.962235][T20642] bond3: (slave ip6gre3): making interface the new active one [ 1013.989825][T20642] ip6gre3: entered promiscuous mode [ 1014.035139][T20642] bond3: (slave ip6gre3): Enslaving as an active interface with an up link [ 1014.193631][T20661] netlink: 'syz.3.21522': attribute type 1 has an invalid length. [ 1014.236172][T20667] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21523'. [ 1014.253788][T20661] bond4: entered promiscuous mode [ 1014.259989][T20661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1014.291294][T20664] syzkaller1: entered promiscuous mode [ 1014.297547][T20664] syzkaller1: entered allmulticast mode [ 1014.322171][T20661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1014.330169][T20661] bond4: (slave gre4): The slave device specified does not support setting the MAC address [ 1014.340229][T20661] bond4: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 1014.356548][T20661] bond4: (slave gre4): making interface the new active one [ 1014.363861][T20661] gre4: entered promiscuous mode [ 1014.370429][T20661] bond4: (slave gre4): Enslaving as an active interface with an up link [ 1014.561883][T20682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21527'. [ 1014.718375][T20693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21531'. [ 1015.095355][T20711] ip6erspan0: entered allmulticast mode [ 1015.220666][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21543'. [ 1015.511548][T20733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.518787][T20733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.618320][T20733] geneve1: left promiscuous mode [ 1015.627215][T20733] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1015.698446][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.705719][T10304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.944414][T20716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1017.343964][T20764] netlink: 'syz.4.21555': attribute type 1 has an invalid length. [ 1017.375066][T20764] netlink: 'syz.4.21555': attribute type 4 has an invalid length. [ 1017.386927][T20764] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.21555'. [ 1017.415996][T20762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21554'. [ 1018.466634][T20799] syzkaller1: entered promiscuous mode [ 1018.472946][T20799] syzkaller1: entered allmulticast mode [ 1018.890397][T20814] syzkaller1: entered promiscuous mode [ 1018.901563][T20814] syzkaller1: entered allmulticast mode [ 1018.978845][T20816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21578'. [ 1019.508756][T20835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21587'. [ 1020.481262][T20872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21601'. [ 1020.632948][T20879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21603'. [ 1020.704984][T20885] IPv6: Can't replace route, no match found [ 1020.713395][T20885] IPv6: Can't replace route, no match found [ 1021.026346][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21613'. [ 1021.103655][T20848] lo speed is unknown, defaulting to 1000 [ 1021.652127][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21620'. [ 1021.719650][T20926] macvlan1: left allmulticast mode [ 1021.733550][T20926] bond11: (slave macvlan1): Enslaving as an active interface with an up link [ 1021.756603][T20926] bond11 (unregistering): (slave macvlan1): Releasing backup interface [ 1021.770756][T20926] bond11 (unregistering): Released all slaves [ 1021.963206][T20936] netlink: 'syz.3.21625': attribute type 1 has an invalid length. [ 1021.993561][T20936] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1022.038974][T20936] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 1022.062529][T20936] netlink: 'syz.3.21625': attribute type 10 has an invalid length. [ 1022.071420][T20936] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21625'. [ 1022.080703][T20936] dummy0: entered promiscuous mode [ 1022.087178][T20936] bond5: (slave dummy0): Releasing backup interface [ 1023.331896][T20983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21644'. [ 1023.593009][T20995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21648'. [ 1024.050207][T21014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21655'. [ 1024.173851][T21007] lo speed is unknown, defaulting to 1000 [ 1024.520132][T21030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1024.816875][T21040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21664'. [ 1024.834268][T21040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21664'. [ 1024.852694][T21040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21664'. [ 1024.887422][T21040] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21664'. [ 1025.052556][T21047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.079136][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21666'. [ 1025.278874][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21668'. [ 1025.316801][T21052] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1025.377741][T21052] bond10: (slave veth23): Enslaving as an active interface with an up link [ 1025.439124][T21052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.448653][T21052] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 1025.907763][T21080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21683'. [ 1025.943233][T21081] syzkaller1: entered promiscuous mode [ 1025.954124][T21081] syzkaller1: entered allmulticast mode [ 1026.301762][T21093] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1026.327115][T21093] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1026.338571][T21093] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1026.357625][T21093] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1026.381088][T21093] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1026.405368][T21093] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1026.420520][T21093] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1026.437539][T21093] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1027.545676][ T48] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1027.755942][T21127] lo speed is unknown, defaulting to 1000 [ 1028.362554][T21176] __nla_validate_parse: 7 callbacks suppressed [ 1028.362573][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21719'. [ 1028.487939][T21180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21720'. [ 1028.759759][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21725'. [ 1028.826201][T21196] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1028.841639][T21199] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1029.041009][T21200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.048566][T21200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.185536][T21216] netlink: 7 bytes leftover after parsing attributes in process `syz.4.21731'. [ 1029.202725][T21200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.218179][T21200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.439151][T21218] veth0: Caught tx_queue_len zero misconfig [ 1029.456466][T21219] netlink: 180 bytes leftover after parsing attributes in process `syz.3.21730'. [ 1029.711039][T21234] syzkaller1: entered promiscuous mode [ 1029.725995][T21234] syzkaller1: entered allmulticast mode [ 1029.770825][T21240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21737'. [ 1029.830542][T21186] lo speed is unknown, defaulting to 1000 [ 1029.980065][T21253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21739'. [ 1030.180835][T21260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21742'. [ 1030.206654][T21258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21741'. [ 1030.217038][T21258] netlink: 64 bytes leftover after parsing attributes in process `syz.3.21741'. [ 1030.424827][T21136] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1031.029927][T21308] netlink: 'syz.0.21753': attribute type 1 has an invalid length. [ 1031.371885][T21330] syzkaller1: entered promiscuous mode [ 1031.401900][T21330] syzkaller1: entered allmulticast mode [ 1031.747103][T21348] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1031.793673][T21348] batman_adv: batadv0: Adding interface: gretap2 [ 1031.806836][T21348] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.875684][T21348] batman_adv: batadv0: Interface activated: gretap2 [ 1032.090885][T21368] bridge18: port 1(vlan0) entered blocking state [ 1032.102007][T21368] bridge18: port 1(vlan0) entered disabled state [ 1032.109559][T21368] vlan0: entered allmulticast mode [ 1032.116092][T21368] bridge18: entered allmulticast mode [ 1032.436400][T21368] vlan0: left allmulticast mode [ 1032.441398][T21368] bridge18: left allmulticast mode [ 1032.761732][T21384] netlink: 'syz.4.21777': attribute type 1 has an invalid length. [ 1032.811487][T21384] bond12: entered promiscuous mode [ 1032.823761][T21384] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1032.969615][T21388] bond12: (slave bridge6): making interface the new active one [ 1032.995331][T21388] bridge6: entered promiscuous mode [ 1033.007848][T21388] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 1033.699492][T21419] __nla_validate_parse: 6 callbacks suppressed [ 1033.699511][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21791'. [ 1033.794413][T21425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21793'. [ 1033.911284][T21431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.21795'. [ 1033.992816][T21433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21797'. [ 1034.841261][T21435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1035.063399][T21478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21812'. [ 1035.143709][T21481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21823'. [ 1035.163483][T21478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21812'. [ 1035.174782][T21478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21812'. [ 1035.718738][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21820'. [ 1035.896647][T21495] lo speed is unknown, defaulting to 1000 [ 1036.069347][T21507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21821'. [ 1036.683209][T21529] syzkaller1: entered promiscuous mode [ 1036.704123][T21529] syzkaller1: entered allmulticast mode [ 1037.003808][T21540] net_ratelimit: 774 callbacks suppressed [ 1037.003826][T21540] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1037.177168][T21513] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1037.248057][T21550] netlink: 'syz.0.21839': attribute type 1 has an invalid length. [ 1039.072169][T21567] __nla_validate_parse: 2 callbacks suppressed [ 1039.072188][T21567] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21846'. [ 1039.487273][T21550] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1039.618425][T21579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21850'. [ 1040.060634][T21595] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21856'. [ 1040.179177][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21860'. [ 1040.790525][T21636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21871'. [ 1041.028010][T21649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21872'. [ 1041.354942][T21663] netlink: 'syz.1.21874': attribute type 1 has an invalid length. [ 1041.459557][T21663] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1041.520241][T21669] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 1041.558744][T21663] netlink: 'syz.1.21874': attribute type 10 has an invalid length. [ 1041.567044][ T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1041.585652][T21663] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21874'. [ 1041.642814][T21663] dummy0: entered promiscuous mode [ 1041.654671][T21663] bond8: (slave dummy0): Removing an active aggregator [ 1041.678976][T21663] bond8: (slave dummy0): Releasing backup interface [ 1042.028134][T21688] syzkaller1: entered promiscuous mode [ 1042.043831][T21688] syzkaller1: entered allmulticast mode [ 1042.585334][T21704] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 1042.649659][T21706] syzkaller1: entered promiscuous mode [ 1042.674148][T21706] syzkaller1: entered allmulticast mode [ 1042.851969][T21701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21869'. [ 1043.001564][T21716] syzkaller1: entered promiscuous mode [ 1043.014076][T21716] syzkaller1: entered allmulticast mode [ 1043.937291][T21728] lo speed is unknown, defaulting to 1000 [ 1044.959606][T21765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21912'. [ 1045.027608][T21771] sctp: [Deprecated]: syz.4.21916 (pid 21771) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1045.027608][T21771] Use struct sctp_sack_info instead [ 1046.102648][T21790] tipc: Failed to remove unknown binding: 66,1,1/16966:2712564729/2712564731 [ 1046.229395][T21723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1046.260856][T21737] netlink: 104 bytes leftover after parsing attributes in process `syz.1.21905'. [ 1046.296223][T21737] netlink: 'syz.1.21905': attribute type 2 has an invalid length. [ 1046.326429][T21737] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21905'. [ 1046.588297][T21811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21934'. [ 1046.981536][T21831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1047.556492][T21861] netlink: 'syz.1.21949': attribute type 4 has an invalid length. [ 1047.962023][T21880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21955'. [ 1048.475843][T21864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1048.607782][T21911] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21962'. [ 1048.907545][T21929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21968'. [ 1049.001589][T21935] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21972'. [ 1049.065068][T21940] sch_tbf: burst 88 is lower than device veth17 mtu (1514) ! [ 1049.227708][T21951] netlink: 64587 bytes leftover after parsing attributes in process `syz.0.21978'. [ 1049.247487][T21901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1049.442840][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21976'. [ 1049.525263][T21969] netlink: 'syz.3.21985': attribute type 1 has an invalid length. [ 1049.533562][T21969] netlink: 'syz.3.21985': attribute type 4 has an invalid length. [ 1049.543232][T21969] netlink: 'syz.3.21985': attribute type 1 has an invalid length. [ 1049.551402][T21969] netlink: 'syz.3.21985': attribute type 4 has an invalid length. [ 1049.599237][T21971] netlink: 'syz.2.21976': attribute type 1 has an invalid length. [ 1049.646515][T21957] lo speed is unknown, defaulting to 1000 [ 1049.851923][T21984] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 1050.373059][T22003] IPv6: NLM_F_CREATE should be specified when creating new route [ 1050.422526][T22006] __nla_validate_parse: 4 callbacks suppressed [ 1050.422544][T22006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21997'. [ 1050.739064][T22024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22005'. [ 1050.828556][T22030] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 1050.835926][T22030] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 1050.850503][T22028] sctp: [Deprecated]: syz.2.22004 (pid 22028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1050.850503][T22028] Use struct sctp_sack_info instead [ 1050.880066][T22032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1051.138304][T22046] xt_hashlimit: size too large, truncated to 1048576 [ 1052.635673][T21974] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1054.187994][T22124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22044'. [ 1054.257937][T22128] netlink: 96 bytes leftover after parsing attributes in process `syz.3.22045'. [ 1054.272496][T22128] 8021q: VLANs not supported on ip6_vti0 [ 1054.289981][T22129] netlink: 'syz.4.22046': attribute type 27 has an invalid length. [ 1054.299790][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1054.299912][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.341965][T22129] batadv_slave_0: left promiscuous mode [ 1054.374972][T22129] syzkaller0: left promiscuous mode [ 1054.386297][T22129] syzkaller0: left allmulticast mode [ 1054.615960][T22137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22049'. [ 1054.661335][T22129] bond9: left promiscuous mode [ 1054.666318][T22129] vti0: left promiscuous mode [ 1054.760106][T22129] bond12: left promiscuous mode [ 1054.765105][T22129] bridge6: left promiscuous mode [ 1054.847042][T22132] gretap0: left promiscuous mode [ 1054.888270][T22132] bridge0: port 3(ip6gretap0) entered blocking state [ 1054.895115][T22132] bridge0: port 3(ip6gretap0) entered forwarding state [ 1054.905188][T22132] bridge0: left promiscuous mode [ 1054.912655][T22132] dummy0: left promiscuous mode [ 1054.934878][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1054.961590][T22132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1054.972158][T22132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1054.985186][T22132] veth1_vlan: left promiscuous mode [ 1054.991580][T22132] veth0_vlan: left promiscuous mode [ 1054.998950][T22132] veth0_vlan: entered promiscuous mode [ 1055.005799][T22132] veth1_vlan: entered promiscuous mode [ 1055.015795][T22132] veth1_macvtap: left promiscuous mode [ 1055.022352][T22132] veth0_macvtap: left promiscuous mode [ 1055.030435][T22132] veth0_macvtap: entered promiscuous mode [ 1055.037451][T22132] veth1_macvtap: entered promiscuous mode [ 1055.057561][T22132] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1055.095254][T10296] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1055.103876][T10296] netdevsim netdevsim4 eth0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1055.119978][T10296] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.149068][ T11] lo speed is unknown, defaulting to 1000 [ 1055.152569][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.155129][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1055.164369][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.185714][ T11] syz2: Port: 1 Link ACTIVE [ 1055.193234][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.200430][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.240995][T10296] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1055.259786][T10296] netdevsim netdevsim4 eth1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1055.286320][T10296] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.302825][T10296] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1055.312321][T10296] netdevsim netdevsim4 eth2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1055.322470][T10296] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.339995][T10296] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1055.349020][T10296] netdevsim netdevsim4 eth3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 1055.358216][T10296] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.404678][ T5796] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1055.447181][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1055.522788][T22159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22055'. [ 1055.605081][ T5640] block nbd13: Receive control failed (result -107) [ 1055.647458][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1055.835120][T22172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.22063'. [ 1055.899800][T22178] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22065'. [ 1055.976668][T22178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22065'. [ 1056.136985][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1056.214973][ T5796] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1056.377272][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1056.771041][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1056.843117][T22208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22076'. [ 1057.287924][T22234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22087'. [ 1057.349753][T22234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22087'. [ 1057.493347][T22243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22090'. [ 1057.545304][T22245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22090'. [ 1058.311324][T22262] netlink: 68 bytes leftover after parsing attributes in process `syz.1.22095'. [ 1059.031298][T22278] netlink: 'syz.4.22101': attribute type 4 has an invalid length. [ 1059.051752][T22280] [ 1059.054121][T22280] ====================================================== [ 1059.061137][T22280] WARNING: possible circular locking dependency detected [ 1059.068155][T22280] syzkaller #0 Not tainted [ 1059.072557][T22280] ------------------------------------------------------ [ 1059.079553][T22280] cryptomgr_probe/22280 is trying to acquire lock: [ 1059.086031][T22280] ffffffff8ec5ec40 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 1059.095642][T22280] [ 1059.095642][T22280] but task is already holding lock: [ 1059.102994][T22280] ffffffff8e9e75b0 (cpu_hotplug_lock){++++}-{0:0}, at: padata_alloc_shell+0x7d/0x1d0 [ 1059.112476][T22280] [ 1059.112476][T22280] which lock already depends on the new lock. [ 1059.112476][T22280] [ 1059.122864][T22280] [ 1059.122864][T22280] the existing dependency chain (in reverse order) is: [ 1059.131862][T22280] [ 1059.131862][T22280] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1059.139582][T22280] cpus_read_lock+0x42/0x160 [ 1059.144726][T22280] static_key_slow_inc+0x12/0x30 [ 1059.150175][T22280] ipv6_flowlabel_opt+0x1cb1/0x2ae0 [ 1059.156003][T22280] do_ipv6_setsockopt+0xdff/0x3180 [ 1059.161660][T22280] ipv6_setsockopt+0x59/0x170 [ 1059.166845][T22280] do_sock_setsockopt+0x17c/0x1b0 [ 1059.172440][T22280] __x64_sys_setsockopt+0x13d/0x1b0 [ 1059.178156][T22280] do_syscall_64+0x174/0x580 [ 1059.183279][T22280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.189689][T22280] [ 1059.189689][T22280] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1059.197411][T22280] lock_sock_nested+0x41/0x100 [ 1059.202783][T22280] inet_shutdown+0x6a/0x390 [ 1059.207860][T22280] nbd_mark_nsock_dead+0x2cb/0x550 [ 1059.213596][T22280] recv_work+0x1cee/0x1e10 [ 1059.218515][T22280] process_scheduled_works+0xa8e/0x14e0 [ 1059.224595][T22280] worker_thread+0xa47/0xfb0 [ 1059.229692][T22280] kthread+0x388/0x470 [ 1059.234277][T22280] ret_from_fork+0x514/0xb70 [ 1059.239406][T22280] ret_from_fork_asm+0x1a/0x30 [ 1059.244676][T22280] [ 1059.244676][T22280] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1059.252306][T22280] __mutex_lock+0x19d/0x1550 [ 1059.257468][T22280] nbd_queue_rq+0x373/0x1150 [ 1059.262569][T22280] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1059.268684][T22280] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1059.275588][T22280] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1059.282075][T22280] blk_mq_run_work_fn+0x16c/0x300 [ 1059.287603][T22280] process_scheduled_works+0xa8e/0x14e0 [ 1059.293652][T22280] worker_thread+0xa47/0xfb0 [ 1059.298746][T22280] kthread+0x388/0x470 [ 1059.303323][T22280] ret_from_fork+0x514/0xb70 [ 1059.308426][T22280] ret_from_fork_asm+0x1a/0x30 [ 1059.313693][T22280] [ 1059.313693][T22280] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1059.320887][T22280] __mutex_lock+0x19d/0x1550 [ 1059.325986][T22280] nbd_queue_rq+0xc1/0x1150 [ 1059.330997][T22280] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1059.337049][T22280] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1059.343887][T22280] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1059.350370][T22280] blk_mq_run_work_fn+0x16c/0x300 [ 1059.355897][T22280] process_scheduled_works+0xa8e/0x14e0 [ 1059.361949][T22280] worker_thread+0xa47/0xfb0 [ 1059.367051][T22280] kthread+0x388/0x470 [ 1059.371644][T22280] ret_from_fork+0x514/0xb70 [ 1059.376759][T22280] ret_from_fork_asm+0x1a/0x30 [ 1059.382035][T22280] [ 1059.382035][T22280] -> #4 (set->srcu){.+.+}-{0:0}: [ 1059.389145][T22280] __synchronize_srcu+0xc9/0x2f0 [ 1059.394638][T22280] elevator_switch+0x1e8/0x7b0 [ 1059.399975][T22280] elevator_change+0x2fa/0x480 [ 1059.405248][T22280] elevator_set_default+0x375/0x440 [ 1059.411040][T22280] blk_register_queue+0x3f3/0x4e0 [ 1059.416643][T22280] __add_disk+0x6cb/0xe30 [ 1059.421474][T22280] add_disk_fwnode+0xfb/0x4b0 [ 1059.426658][T22280] nbd_dev_add+0x733/0xb60 [ 1059.431586][T22280] nbd_init+0x15f/0x1e0 [ 1059.436336][T22280] do_one_initcall+0x250/0x870 [ 1059.441614][T22280] do_initcall_level+0x10a/0x1a0 [ 1059.447057][T22280] do_initcalls+0x59/0xa0 [ 1059.451892][T22280] kernel_init_freeable+0x29d/0x3e0 [ 1059.457599][T22280] kernel_init+0x1d/0x1d0 [ 1059.462442][T22280] ret_from_fork+0x514/0xb70 [ 1059.467542][T22280] ret_from_fork_asm+0x1a/0x30 [ 1059.472809][T22280] [ 1059.472809][T22280] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1059.480610][T22280] __mutex_lock+0x19d/0x1550 [ 1059.485711][T22280] elevator_change+0x1af/0x480 [ 1059.490980][T22280] elevator_set_none+0xb5/0x140 [ 1059.496345][T22280] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1059.502680][T22280] nbd_start_device+0x189/0xb30 [ 1059.508049][T22280] nbd_genl_connect+0x1597/0x1c10 [ 1059.513588][T22280] genl_family_rcv_msg_doit+0x233/0x340 [ 1059.519734][T22280] genl_rcv_msg+0x614/0x7a0 [ 1059.524744][T22280] netlink_rcv_skb+0x226/0x4a0 [ 1059.530057][T22280] genl_rcv+0x28/0x40 [ 1059.534542][T22280] netlink_unicast+0x7bb/0x940 [ 1059.539814][T22280] netlink_sendmsg+0x813/0xb40 [ 1059.545090][T22280] sock_sendmsg_nosec+0x13a/0x180 [ 1059.550620][T22280] ____sys_sendmsg+0x54e/0x850 [ 1059.555893][T22280] ___sys_sendmsg+0x2a5/0x360 [ 1059.561079][T22280] __x64_sys_sendmsg+0x1b1/0x290 [ 1059.566523][T22280] do_syscall_64+0x174/0x580 [ 1059.571630][T22280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.578028][T22280] [ 1059.578028][T22280] -> #2 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1059.586616][T22280] blk_alloc_queue+0x544/0x690 [ 1059.591889][T22280] __blk_mq_alloc_disk+0x194/0x390 [ 1059.597511][T22280] nbd_dev_add+0x494/0xb60 [ 1059.602436][T22280] nbd_init+0x15f/0x1e0 [ 1059.607099][T22280] do_one_initcall+0x250/0x870 [ 1059.612374][T22280] do_initcall_level+0x10a/0x1a0 [ 1059.617820][T22280] do_initcalls+0x59/0xa0 [ 1059.622655][T22280] kernel_init_freeable+0x29d/0x3e0 [ 1059.628357][T22280] kernel_init+0x1d/0x1d0 [ 1059.633188][T22280] ret_from_fork+0x514/0xb70 [ 1059.638284][T22280] ret_from_fork_asm+0x1a/0x30 [ 1059.643548][T22280] [ 1059.643548][T22280] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1059.650742][T22280] fs_reclaim_acquire+0x71/0x100 [ 1059.656188][T22280] prepare_alloc_pages+0x15b/0x650 [ 1059.661804][T22280] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1059.668117][T22280] __alloc_pages_noprof+0x10/0x100 [ 1059.673742][T22280] pcpu_populate_chunk+0x181/0xb30 [ 1059.679357][T22280] pcpu_alloc_noprof+0xbca/0x1900 [ 1059.684884][T22280] xt_percpu_counter_alloc+0x145/0x1e0 [ 1059.690953][T22280] translate_table+0x129a/0x1f80 [ 1059.696444][T22280] ipt_register_table+0x112/0x310 [ 1059.701978][T22280] iptable_mangle_table_init+0x41/0x70 [ 1059.707939][T22280] xt_find_table_lock+0x311/0x400 [ 1059.713468][T22280] xt_request_find_table_lock+0x26/0x100 [ 1059.719605][T22280] do_ipt_get_ctl+0x77f/0x1300 [ 1059.724882][T22280] nf_getsockopt+0x26e/0x290 [ 1059.730063][T22280] ip_getsockopt+0x19e/0x230 [ 1059.735221][T22280] do_sock_getsockopt+0x51d/0x7e0 [ 1059.740756][T22280] __x64_sys_getsockopt+0x1a4/0x240 [ 1059.746464][T22280] do_syscall_64+0x174/0x580 [ 1059.751560][T22280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.757958][T22280] [ 1059.757958][T22280] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1059.765676][T22280] __lock_acquire+0x1520/0x2cf0 [ 1059.771034][T22280] lock_acquire+0x106/0x350 [ 1059.776045][T22280] __mutex_lock+0x19d/0x1550 [ 1059.781144][T22280] pcpu_alloc_noprof+0x231/0x1900 [ 1059.786674][T22280] padata_alloc_pd+0x93/0x720 [ 1059.791855][T22280] padata_alloc_shell+0x8a/0x1d0 [ 1059.797298][T22280] pcrypt_create+0xea/0x750 [ 1059.802379][T22280] cryptomgr_probe+0x80/0x210 [ 1059.807606][T22280] kthread+0x388/0x470 [ 1059.812202][T22280] ret_from_fork+0x514/0xb70 [ 1059.817309][T22280] ret_from_fork_asm+0x1a/0x30 [ 1059.822591][T22280] [ 1059.822591][T22280] other info that might help us debug this: [ 1059.822591][T22280] [ 1059.832810][T22280] Chain exists of: [ 1059.832810][T22280] pcpu_alloc_mutex --> sk_lock-AF_INET6 --> cpu_hotplug_lock [ 1059.832810][T22280] [ 1059.846095][T22280] Possible unsafe locking scenario: [ 1059.846095][T22280] [ 1059.853529][T22280] CPU0 CPU1 [ 1059.858875][T22280] ---- ---- [ 1059.864222][T22280] rlock(cpu_hotplug_lock); [ 1059.868797][T22280] lock(sk_lock-AF_INET6); [ 1059.875804][T22280] lock(cpu_hotplug_lock); [ 1059.882809][T22280] lock(pcpu_alloc_mutex); [ 1059.887294][T22280] [ 1059.887294][T22280] *** DEADLOCK *** [ 1059.887294][T22280] [ 1059.895416][T22280] 1 lock held by cryptomgr_probe/22280: [ 1059.900939][T22280] #0: ffffffff8e9e75b0 (cpu_hotplug_lock){++++}-{0:0}, at: padata_alloc_shell+0x7d/0x1d0 [ 1059.910853][T22280] [ 1059.910853][T22280] stack backtrace: [ 1059.916729][T22280] CPU: 1 UID: 0 PID: 22280 Comm: cryptomgr_probe Not tainted syzkaller #0 PREEMPT(full) [ 1059.916747][T22280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1059.916756][T22280] Call Trace: [ 1059.916762][T22280] [ 1059.916769][T22280] dump_stack_lvl+0xe8/0x150 [ 1059.916795][T22280] print_circular_bug+0x2e1/0x300 [ 1059.916812][T22280] check_noncircular+0x12e/0x150 [ 1059.916837][T22280] __lock_acquire+0x1520/0x2cf0 [ 1059.916861][T22280] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1059.916965][T22280] ? lockdep_hardirqs_on+0x7a/0x110 [ 1059.916985][T22280] ? pcpu_alloc_noprof+0x231/0x1900 [ 1059.917001][T22280] lock_acquire+0x106/0x350 [ 1059.917018][T22280] ? pcpu_alloc_noprof+0x231/0x1900 [ 1059.917039][T22280] __mutex_lock+0x19d/0x1550 [ 1059.917058][T22280] ? pcpu_alloc_noprof+0x231/0x1900 [ 1059.917077][T22280] ? pcpu_alloc_noprof+0x231/0x1900 [ 1059.917094][T22280] ? __pfx___mutex_lock+0x10/0x10 [ 1059.917119][T22280] ? rcu_is_watching+0x15/0xb0 [ 1059.917141][T22280] pcpu_alloc_noprof+0x231/0x1900 [ 1059.917159][T22280] ? __kmalloc_cache_noprof+0x150/0x660 [ 1059.917186][T22280] ? padata_alloc_pd+0x6d/0x720 [ 1059.917207][T22280] padata_alloc_pd+0x93/0x720 [ 1059.917229][T22280] padata_alloc_shell+0x8a/0x1d0 [ 1059.917248][T22280] pcrypt_create+0xea/0x750 [ 1059.917270][T22280] cryptomgr_probe+0x80/0x210 [ 1059.917287][T22280] kthread+0x388/0x470 [ 1059.917306][T22280] ? __pfx_cryptomgr_probe+0x10/0x10 [ 1059.917320][T22280] ? __pfx_kthread+0x10/0x10 [ 1059.917339][T22280] ret_from_fork+0x514/0xb70 [ 1059.917360][T22280] ? __pfx_ret_from_fork+0x10/0x10 [ 1059.917379][T22280] ? __switch_to+0xc89/0x1420 [ 1059.917397][T22280] ? __pfx_kthread+0x10/0x10 [ 1059.917416][T22280] ret_from_fork_asm+0x1a/0x30 [ 1059.917435][T22280] [ 1060.190215][T22282] netlink: 'syz.4.22101': attribute type 4 has an invalid length. [ 1060.249524][ T5757] lo speed is unknown, defaulting to 1000 [ 1060.258552][ T7671] lo speed is unknown, defaulting to 1000 [ 1060.614415][ C1] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 1060.614434][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1061.824161][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1068.377385][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!