last executing test programs: 5.181840971s ago: executing program 1 (id=10826): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x40, 0xcc26, 0xffb, 0xae, 0xb69, 0x4, 0x81, 0x1, 0x3, 0x5, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffd, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x75e, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x8, 0xbed4, 0x6, 0x8000100, 0x3, 0x0, 0x8, 0x8, 0x5, 0x79b, 0xfffffff7, 0xfffffffe, 0x5, 0x4, 0x7, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xfc55, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x2, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x0, 0x401, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x84, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x282, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x40, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0x3, 0x4]}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 5.07292037s ago: executing program 3 (id=10827): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b595000000000000f2000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 5.071560648s ago: executing program 1 (id=10828): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001600)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffbfffffffff1704b45adbde0800452d60f97c3d3c"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 4.720460546s ago: executing program 2 (id=10829): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 4.559046658s ago: executing program 1 (id=10830): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 4.491558267s ago: executing program 2 (id=10831): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 4.366107671s ago: executing program 2 (id=10832): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 4.15261896s ago: executing program 2 (id=10833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x89fa, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.024238805s ago: executing program 1 (id=10834): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 3.689575103s ago: executing program 3 (id=10836): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25ffdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0x6}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40400d4) 3.651544283s ago: executing program 1 (id=10837): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x2f}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150) 3.46823634s ago: executing program 4 (id=10838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7131926aae1efd7e0054a863d085cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d10", 0x25}], 0x2}], 0x1, 0x40800) recvmsg$can_raw(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000840)=""/182, 0xb6}], 0x2}, 0x2123) 3.391417577s ago: executing program 1 (id=10839): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xea}]}}]}, 0x44}}, 0x44094) 3.337668359s ago: executing program 2 (id=10840): r0 = socket$inet(0x2, 0x1, 0x100) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) 3.214940457s ago: executing program 4 (id=10841): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r0, 0x0) unshare(0x22020600) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r1, &(0x7f0000000100)=@abs={0x27}, 0x6e) 2.700531205s ago: executing program 2 (id=10842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0xd) 2.549001102s ago: executing program 4 (id=10843): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) 1.776527427s ago: executing program 0 (id=10847): syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100100086dd"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.6788731s ago: executing program 3 (id=10849): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x4080) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.660920077s ago: executing program 4 (id=10850): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x24040884) 1.486746401s ago: executing program 3 (id=10851): r0 = socket$inet(0x2, 0x1, 0x100) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000040)=0x9, 0x4) 1.288947352s ago: executing program 4 (id=10852): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272466467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.135965493s ago: executing program 0 (id=10853): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0xffffffffffffffff, {0x2, 0xff, 0x6}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r1, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r3, 0x0, {0x1, 0xff, 0x4}, 0x2}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40840}, 0x44015) 1.085147596s ago: executing program 4 (id=10854): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) 964.685585ms ago: executing program 0 (id=10855): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 873.447101ms ago: executing program 0 (id=10856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 456.83711ms ago: executing program 0 (id=10857): unshare(0x22020600) r0 = socket(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000000280)) 333.864091ms ago: executing program 3 (id=10858): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 134.843451ms ago: executing program 0 (id=10859): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000104000000000000800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=10860): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='wi', 0x2}], 0x1, 0x1) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(0x4) kernel console output (not intermixed with test programs): 1] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 439.923928][T21682] tun0: tun_chr_ioctl cmd 2148553947 [ 439.962066][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.969413][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.145098][T21692] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7402'. [ 440.474398][T21710] netlink: 67 bytes leftover after parsing attributes in process `syz.4.7410'. [ 440.843796][T21734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7420'. [ 441.249371][T21755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7431'. [ 441.289047][T21755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7431'. [ 442.522936][ T1587] block nbd0: Possible stuck request ffff888027bfe000: control (read@0,1024B). Runtime 30 seconds [ 442.677103][T21823] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7458'. [ 443.072075][T21845] netlink: 'syz.1.7468': attribute type 4 has an invalid length. [ 443.078188][T21844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7469'. [ 443.099504][T21844] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7469'. [ 443.118745][T21844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7469'. [ 445.945902][T21952] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 446.056881][T21952] bond1 (unregistering): Released all slaves [ 446.224305][T21965] openvswitch: netlink: IP tunnel TTL not specified. [ 446.241238][T21965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.382306][ T5633] block nbd2: Receive control failed (result -32) [ 446.382694][ T5630] block nbd2: Receive control failed (result -32) [ 446.440519][T21969] __nla_validate_parse: 2 callbacks suppressed [ 446.440536][T21969] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7525'. [ 446.593813][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7529'. [ 446.613983][T21977] netlink: 'syz.4.7529': attribute type 2 has an invalid length. [ 446.628474][T21977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7529'. [ 447.166917][T22009] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7545'. [ 447.281167][T22017] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7548'. [ 447.291803][T22017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7548'. [ 448.302087][T22062] netlink: 'syz.2.7570': attribute type 6 has an invalid length. [ 448.874956][T22094] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7583'. [ 448.906948][T22094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7583'. [ 448.931570][T22097] netlink: 'syz.2.7584': attribute type 22 has an invalid length. [ 448.961697][T22097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7584'. [ 449.005505][T22100] netlink: 'syz.2.7584': attribute type 22 has an invalid length. [ 449.046106][T22100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7584'. [ 449.995580][T22159] macvlan0: entered promiscuous mode [ 450.007678][T22159] netlink: 'syz.4.7614': attribute type 1 has an invalid length. [ 450.025805][T22159] netlink: 'syz.4.7614': attribute type 2 has an invalid length. [ 450.233368][T22171] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 453.531264][T22325] __nla_validate_parse: 3 callbacks suppressed [ 453.531284][T22325] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7685'. [ 454.028112][T22342] netlink: 'syz.2.7693': attribute type 83 has an invalid length. [ 455.978898][T22408] bond0: (slave ip6tnl0): refused to change device type [ 456.013067][T22408] ip6erspan0: entered allmulticast mode [ 456.155761][T22414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7727'. [ 456.306070][T22421] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 456.315829][T22421] syzkaller1: linktype set to 823 [ 456.817991][T22448] C: renamed from veth1_to_team [ 456.834964][T22448] netlink: 'syz.2.7743': attribute type 2 has an invalid length. [ 456.859318][T22448] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7743'. [ 456.904442][T22448] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 457.117689][T22463] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7749'. [ 457.127241][T22463] 0ªX¹¦À: renamed from batadv0 [ 457.182227][T22463] 0ªX¹¦À: entered allmulticast mode [ 457.199005][T22463] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 457.218167][T22463] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 457.603197][T22477] netlink: 'syz.2.7756': attribute type 83 has an invalid length. [ 457.849146][T22488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7761'. [ 458.502920][T22520] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7777'. [ 458.619996][T22522] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.640707][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7779'. [ 458.660201][T22522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.667489][T22522] IPv6: NLM_F_CREATE should be set when creating new route [ 458.674855][T22522] IPv6: NLM_F_CREATE should be set when creating new route [ 458.682145][T22522] IPv6: NLM_F_CREATE should be set when creating new route [ 458.698311][T22529] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7778'. [ 459.221126][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7795'. [ 459.585605][T22575] syz_tun: entered promiscuous mode [ 459.610729][T22574] syz_tun: left promiscuous mode [ 459.786622][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7808'. [ 459.834456][T22589] netlink: 'syz.4.7809': attribute type 1 has an invalid length. [ 459.860597][T22589] netlink: 'syz.4.7809': attribute type 2 has an invalid length. [ 459.902081][T22589] netlink: 'syz.4.7809': attribute type 1 has an invalid length. [ 459.930835][T22589] netlink: 'syz.4.7809': attribute type 2 has an invalid length. [ 459.961735][T22595] openvswitch: netlink: Actions may not be safe on all matching packets [ 460.234842][T22610] netlink: 165 bytes leftover after parsing attributes in process `syz.3.7820'. [ 460.853207][T22646] netlink: 'syz.1.7836': attribute type 1 has an invalid length. [ 460.866332][T22646] netlink: 'syz.1.7836': attribute type 2 has an invalid length. [ 462.168547][T22712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7865'. [ 462.383891][T22725] netlink: 480 bytes leftover after parsing attributes in process `syz.4.7869'. [ 462.418516][T22725] netlink: 480 bytes leftover after parsing attributes in process `syz.4.7869'. [ 462.574681][T22736] netlink: 220 bytes leftover after parsing attributes in process `syz.4.7876'. [ 462.762613][T22742] pimreg: tun_chr_ioctl cmd 1074025677 [ 462.779257][T22742] pimreg: linktype set to 270 [ 462.831892][T22748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7882'. [ 463.320136][T22782] netlink: 'syz.1.7896': attribute type 10 has an invalid length. [ 463.360952][T22782] geneve2: entered promiscuous mode [ 463.373787][T22782] geneve2: entered allmulticast mode [ 463.386967][ T1055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.416110][ T1055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.455241][ T1055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.794948][T22804] __nla_validate_parse: 3 callbacks suppressed [ 463.794993][T22804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7905'. [ 464.072971][T22820] sctp: [Deprecated]: syz.4.7913 (pid 22820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.072971][T22820] Use struct sctp_sack_info instead [ 464.265207][T22830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7918'. [ 464.515057][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7925'. [ 464.871383][T22861] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 465.046243][T22875] openvswitch: netlink: IP tunnel dst address not specified [ 465.069456][T22875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.164246][ T5633] block nbd3: Receive control failed (result -32) [ 466.456620][T22947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7969'. [ 467.063479][T22970] netlink: 'syz.3.7979': attribute type 83 has an invalid length. [ 467.407497][T22984] netlink: 'syz.0.7986': attribute type 10 has an invalid length. [ 467.424928][T22984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7986'. [ 468.137450][T23007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7997'. [ 469.561355][T23042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8013'. [ 469.869242][T23051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8016'. [ 470.172588][ T5633] block nbd4: Receive control failed (result -32) [ 470.224040][T23067] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8025'. [ 470.664033][T23090] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8034'. [ 470.706842][T23090] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8034'. [ 471.444090][T23127] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8050'. [ 471.588230][T23133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8054'. [ 471.803595][T23147] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8061'. [ 471.818107][T23147] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8061'. [ 471.832408][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8060'. [ 472.006375][T23156] blkio.reset_stats is deprecated [ 472.599960][ T1587] block nbd0: Possible stuck request ffff888027bfe000: control (read@0,1024B). Runtime 60 seconds [ 472.736335][T23198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.293233][T23228] netlink: 'syz.3.8095': attribute type 29 has an invalid length. [ 474.257800][T23277] veth0_to_team: entered promiscuous mode [ 474.273825][T23277] debugfs: 'hsr1' already exists in 'hsr' [ 474.282787][T23277] Cannot create hsr debugfs directory [ 474.401030][T23282] bond0: entered promiscuous mode [ 474.406344][T23282] bond_slave_0: entered promiscuous mode [ 474.413793][T23282] bond_slave_1: entered promiscuous mode [ 474.424586][T23282] bond0: left promiscuous mode [ 474.439054][T23282] bond_slave_0: left promiscuous mode [ 474.467311][T23282] bond_slave_1: left promiscuous mode [ 474.823234][T23298] tap0: tun_chr_ioctl cmd 2148553947 [ 475.018407][T23306] __nla_validate_parse: 9 callbacks suppressed [ 475.018427][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8132'. [ 475.047556][T23306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8132'. [ 475.058091][T23306] netlink: 'syz.0.8132': attribute type 20 has an invalid length. [ 475.121287][T23310] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8133'. [ 475.313954][T23315] ip6gre3: entered promiscuous mode [ 475.327051][T23315] ip6gre3: entered allmulticast mode [ 475.348276][T10455] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 475.363844][T10455] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 475.371738][ T5752] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 475.540502][ T5752] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 475.806925][T23338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8143'. [ 476.009851][T23345] team0: No ports can be present during mode change [ 476.123617][ T5752] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 476.787985][T23381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8163'. [ 476.972205][T23390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8167'. [ 477.137555][T23394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8170'. [ 477.168141][T23394] netlink: 'syz.0.8170': attribute type 12 has an invalid length. [ 477.197157][T23394] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8170'. [ 477.586034][T23413] netlink: 'syz.2.8179': attribute type 3 has an invalid length. [ 477.605792][T23413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8179'. [ 477.913534][T23429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8185'. [ 479.001091][T23490] wlan0 speed is unknown, defaulting to 1000 [ 479.024613][T23490] wlan0 speed is unknown, defaulting to 1000 [ 479.052137][T23490] wlan0 speed is unknown, defaulting to 1000 [ 479.087456][T23490] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 479.120625][T23490] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 479.184549][T23490] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 479.240902][T23490] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 479.246351][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 479.347911][T23490] wlan0 speed is unknown, defaulting to 1000 [ 479.370970][T23490] wlan0 speed is unknown, defaulting to 1000 [ 479.391740][T23490] wlan0 speed is unknown, defaulting to 1000 [ 479.413853][T23490] wlan0 speed is unknown, defaulting to 1000 [ 479.435038][T23490] wlan0 speed is unknown, defaulting to 1000 [ 480.351162][T23533] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 480.967067][T10455] tipc: Subscription rejected, illegal request [ 481.487814][T23576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8253'. [ 482.127351][T23606] openvswitch: netlink: IP tunnel dst address not specified [ 482.151201][T23606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.686224][T23635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8280'. [ 482.717679][T23635] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8280'. [ 483.446681][T23675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8297'. [ 484.749355][T23737] netlink: 'syz.4.8327': attribute type 1 has an invalid length. [ 485.080957][T23749] bond3 (unregistering): Released all slaves [ 485.092004][T23750] nbd: socks must be embedded in a SOCK_ITEM attr [ 485.103780][T23750] block nbd5: shutting down sockets [ 485.128078][T23753] macsec0: entered promiscuous mode [ 485.141690][T23754] macsec0: left promiscuous mode [ 485.551294][T23775] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 485.794409][T23790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8351'. [ 485.826154][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8351'. [ 486.135636][T23810] netlink: 'syz.2.8358': attribute type 5 has an invalid length. [ 486.679719][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 486.825983][T23832] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 486.853116][T23835] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8371'. [ 487.160666][T23832] bond1 (unregistering): Released all slaves [ 487.256795][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8378'. [ 487.403883][T23855] netlink: 'syz.0.8376': attribute type 1 has an invalid length. [ 487.441706][T23857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8381'. [ 487.495720][T23862] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8382'. [ 487.533965][T23859] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.8382'. [ 487.703706][T23875] netlink: 'syz.0.8389': attribute type 11 has an invalid length. [ 487.847350][T23881] netlink: 616 bytes leftover after parsing attributes in process `syz.2.8392'. [ 488.987171][T23940] macvlan0: entered promiscuous mode [ 488.999990][T23940] netlink: 'syz.1.8417': attribute type 1 has an invalid length. [ 489.022344][T23940] netlink: 'syz.1.8417': attribute type 2 has an invalid length. [ 489.912437][T23995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8443'. [ 490.007601][T24001] netlink: 'syz.1.8445': attribute type 1 has an invalid length. [ 490.024273][T24001] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.8445'. [ 490.045566][T24001] netlink: 'syz.1.8445': attribute type 1 has an invalid length. [ 490.053679][T24001] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.8445'. [ 490.471453][T24025] netlink: 'syz.0.8456': attribute type 6 has an invalid length. [ 490.499984][T24022] sctp: [Deprecated]: syz.4.8458 (pid 24022) Use of int in maxseg socket option. [ 490.499984][T24022] Use struct sctp_assoc_value instead [ 491.066289][T24052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8469'. [ 491.336220][T24066] batadv_slave_1: entered promiscuous mode [ 491.352789][T24065] batadv_slave_1: left promiscuous mode [ 491.566897][T24082] netlink: 'syz.0.8485': attribute type 7 has an invalid length. [ 491.583670][T24082] netlink: 'syz.0.8485': attribute type 8 has an invalid length. [ 491.888783][T24101] __nla_validate_parse: 2 callbacks suppressed [ 491.888803][T24101] netlink: 766 bytes leftover after parsing attributes in process `syz.0.8495'. [ 492.663968][T24145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8515'. [ 492.828629][T24155] netlink: 'syz.0.8520': attribute type 1 has an invalid length. [ 492.857315][T24157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8521'. [ 492.866894][T24157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8521'. [ 492.876497][T24157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8521'. [ 492.885947][T24157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8521'. [ 492.896166][T24157] netlink: 'syz.2.8521': attribute type 6 has an invalid length. [ 492.999176][T24161] vlan3: entered promiscuous mode [ 493.005278][T24161] syz_tun: entered promiscuous mode [ 493.010846][T24161] vlan3: entered allmulticast mode [ 493.016143][T24161] syz_tun: entered allmulticast mode [ 493.097761][T24165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8525'. [ 493.116597][T24165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8525'. [ 493.136001][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8526'. [ 493.152560][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8526'. [ 493.228885][T24171] netlink: 'syz.0.8528': attribute type 4 has an invalid length. [ 493.605300][T24190] x_tables: duplicate underflow at hook 3 [ 493.689908][T24190] batman_adv: 60ªX¹¦À: Removing interface: vlan4 [ 493.742774][T24190] tipc: Disabling bearer [ 494.067780][T24210] syzkaller1: entered promiscuous mode [ 494.076565][T24210] syzkaller1: entered allmulticast mode [ 495.544800][T24288] tipc: Started in network mode [ 495.560467][T24288] tipc: Node identity ac1414aa, cluster identity 4711 [ 495.574531][T24288] tipc: Enabled bearer , priority 10 [ 496.279871][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 496.389360][T24304] batadv_slave_1: entered promiscuous mode [ 496.415798][T24303] batadv_slave_1: left promiscuous mode [ 496.689649][ T10] tipc: Node number set to 2886997162 [ 496.774732][ T5633] block nbd5: Receive control failed (result -107) [ 497.249368][T24301] infiniband syz1: set down [ 497.257685][T24301] infiniband syz1: added syz_tun [ 497.298351][T24301] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 497.320198][T24301] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 497.394689][T24301] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 497.413203][T24346] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.427628][T24346] tipc: Enabled bearer , priority 10 [ 497.476161][T24301] RDS/IB: syz1: added [ 497.492619][T24301] smc: adding ib device syz1 with port count 1 [ 497.509265][T24301] smc: ib device syz1 port 1 has no pnetid [ 497.550087][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.575026][T24353] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.819953][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 498.142252][T24377] __nla_validate_parse: 4 callbacks suppressed [ 498.142273][T24377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8620'. [ 498.273317][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8621'. [ 498.283916][T24379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8621'. [ 498.324054][T24379] geneve3: entered promiscuous mode [ 498.338164][T24379] geneve3: entered allmulticast mode [ 498.349746][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 498.700233][T24391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8626'. [ 498.727834][T24391] block nbd6: Unsupported socket: should be TCP or UNIX. [ 499.399652][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.092478][T24432] lo speed is unknown, defaulting to 1000 [ 500.105117][T24432] wlan0 speed is unknown, defaulting to 1000 [ 500.439779][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 500.709654][T24458] veth1_to_bond: entered allmulticast mode [ 500.717658][T24457] veth1_to_bond: left allmulticast mode [ 500.754532][T24434] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8646'. [ 500.851860][T24461] bond0: (slave vlan0): Opening slave failed [ 501.308328][T24479] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8664'. [ 501.401914][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 501.405211][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.420238][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.479616][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 502.184014][T24516] lo speed is unknown, defaulting to 1000 [ 502.212457][T24516] wlan0 speed is unknown, defaulting to 1000 [ 502.398801][T24528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8686'. [ 502.519721][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 502.621082][T24531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8686'. [ 502.652085][T24531] nbd: nbd64 already in use [ 502.705658][ T1587] block nbd0: Possible stuck request ffff888027bfe000: control (read@0,1024B). Runtime 90 seconds [ 502.965393][ T5628] udevd[5628]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 503.559732][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.599755][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 505.064452][T24648] lo: entered allmulticast mode [ 505.094564][T24648] tunl0: entered allmulticast mode [ 505.103724][T24648] gre0: entered allmulticast mode [ 505.140299][T24648] gretap0: entered allmulticast mode [ 505.159216][T24648] erspan0: entered allmulticast mode [ 505.172560][T24648] ip_vti0: entered allmulticast mode [ 505.188726][T24648] ip6_vti0: entered allmulticast mode [ 505.231914][T24648] sit0: left promiscuous mode [ 505.236691][T24648] sit0: entered allmulticast mode [ 505.261376][T24648] ip6tnl0: entered allmulticast mode [ 505.288364][T24648] ip6gre0: entered allmulticast mode [ 505.313291][T24648] ip6gretap0: entered allmulticast mode [ 505.324834][T24648] vcan0: entered allmulticast mode [ 505.347101][T24648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.363664][T24648] team0: entered allmulticast mode [ 505.376510][T24648] team_slave_0: entered allmulticast mode [ 505.390417][T24648] team_slave_1: entered allmulticast mode [ 505.402339][T24648] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.412056][T24648] dummy0: entered allmulticast mode [ 505.422957][T24648] nlmon0: entered allmulticast mode [ 505.430318][T24648] vxcan0: entered allmulticast mode [ 505.436826][T24648] vxcan1: entered allmulticast mode [ 505.453357][T24648] veth0: entered allmulticast mode [ 505.471084][T24648] veth1: entered allmulticast mode [ 505.504844][T24648] wg0: entered allmulticast mode [ 505.604978][T24648] wg1: entered allmulticast mode [ 505.626388][T24648] wg2: entered allmulticast mode [ 505.639739][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 505.648228][T24648] veth0_to_bridge: entered allmulticast mode [ 505.669017][T24648] bridge_slave_0: entered allmulticast mode [ 505.684553][T24648] veth1_to_bridge: entered allmulticast mode [ 505.697581][T24648] bridge_slave_1: entered allmulticast mode [ 505.706479][T24648] veth0_to_bond: entered allmulticast mode [ 505.718126][T24648] veth1_to_bond: entered allmulticast mode [ 505.727662][T24648] veth0_to_team: entered allmulticast mode [ 505.737755][T24648] veth1_to_team: entered allmulticast mode [ 505.749074][T24648] veth0_to_batadv: entered allmulticast mode [ 505.774897][T24648] batadv_slave_0: entered allmulticast mode [ 505.795855][T24648] veth1_to_batadv: entered allmulticast mode [ 505.827673][T24648] batadv_slave_1: entered allmulticast mode [ 505.845068][T24648] xfrm0: entered allmulticast mode [ 505.863487][T24648] veth0_to_hsr: entered allmulticast mode [ 505.883837][T24648] hsr_slave_0: entered allmulticast mode [ 505.911936][T24648] veth1_to_hsr: entered allmulticast mode [ 505.934113][T24681] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8747'. [ 505.951526][T24648] hsr_slave_1: entered allmulticast mode [ 505.972605][T24648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.985425][T24648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.997010][T24648] hsr0: entered allmulticast mode [ 506.006201][T24648] veth1_virt_wifi: entered allmulticast mode [ 506.014355][T24648] veth0_virt_wifi: entered allmulticast mode [ 506.022613][T24648] virt_wifi0: entered allmulticast mode [ 506.028775][T24648] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 506.055800][T24687] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8747'. [ 506.114985][T24681] gretap0: entered promiscuous mode [ 506.127652][T24687] 0ªî{X¹¦: renamed from gretap0 [ 506.161054][T24687] 0ªî{X¹¦: entered allmulticast mode [ 506.180953][T24687] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 506.523932][T24702] netlink: 'syz.1.8754': attribute type 1 has an invalid length. [ 506.679746][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.752404][T24716] syzkaller1: entered promiscuous mode [ 506.764060][T24716] syzkaller1: entered allmulticast mode [ 506.896485][T24724] lo speed is unknown, defaulting to 1000 [ 506.920288][T24724] wlan0 speed is unknown, defaulting to 1000 [ 507.118589][T24736] syzkaller1: entered promiscuous mode [ 507.132059][T24736] syzkaller1: entered allmulticast mode [ 507.696795][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8775'. [ 507.719839][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.189835][T24773] syzkaller1: entered promiscuous mode [ 508.198323][T24773] syzkaller1: entered allmulticast mode [ 508.744330][T24784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8790'. [ 508.759805][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.986083][T24793] lo: entered allmulticast mode [ 508.997118][T24793] tunl0: entered allmulticast mode [ 509.015115][T24793] gre0: entered allmulticast mode [ 509.034145][T24793] gretap0: entered allmulticast mode [ 509.043563][T24793] erspan0: entered allmulticast mode [ 509.052429][T24793] ip_vti0: entered allmulticast mode [ 509.059185][T24793] ip6_vti0: entered allmulticast mode [ 509.072181][T24793] sit0: entered allmulticast mode [ 509.087034][T24793] ip6tnl0: entered allmulticast mode [ 509.094549][T24793] ip6gre0: entered allmulticast mode [ 509.108470][T24793] syz_tun: entered allmulticast mode [ 509.116211][T24793] ip6gretap0: entered allmulticast mode [ 509.123869][T24793] vcan0: entered allmulticast mode [ 509.130748][T24793] bond0: entered allmulticast mode [ 509.135974][T24793] bond_slave_0: entered allmulticast mode [ 509.143039][T24793] bond_slave_1: entered allmulticast mode [ 509.152538][T24793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.161938][T24793] nlmon0: entered allmulticast mode [ 509.168058][T24793] batadv0: entered allmulticast mode [ 509.175170][T24793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.183648][T24793] vxcan0: entered allmulticast mode [ 509.190627][T24793] vxcan1: entered allmulticast mode [ 509.196734][T24793] veth0: entered allmulticast mode [ 509.203558][T24793] veth1: entered allmulticast mode [ 509.212079][T24793] wg0: entered allmulticast mode [ 509.218128][ T1055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.227635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.237155][T24793] wg1: entered allmulticast mode [ 509.238121][ T1055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.252238][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.261335][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.270509][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.280963][T24793] wg2: entered allmulticast mode [ 509.287261][T24793] veth0_to_bridge: entered allmulticast mode [ 509.294860][T24793] bridge_slave_0: entered allmulticast mode [ 509.301962][T24793] veth1_to_bridge: entered allmulticast mode [ 509.309011][T24793] bridge_slave_1: entered allmulticast mode [ 509.317091][T24793] veth0_to_bond: entered allmulticast mode [ 509.325317][T24793] veth1_to_bond: entered allmulticast mode [ 509.333514][T24793] veth0_to_team: entered allmulticast mode [ 509.340796][T24793] team_slave_0: entered allmulticast mode [ 509.347116][T24793] veth1_to_team: entered allmulticast mode [ 509.354201][T24793] team_slave_1: entered allmulticast mode [ 509.361427][T24793] veth0_to_batadv: entered allmulticast mode [ 509.368652][T24793] batadv_slave_0: entered allmulticast mode [ 509.375563][T24793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.383449][T24793] veth1_to_batadv: entered allmulticast mode [ 509.390605][T24793] batadv_slave_1: entered allmulticast mode [ 509.397151][T24793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.407596][T24793] xfrm0: entered allmulticast mode [ 509.414260][T24793] veth0_to_hsr: entered allmulticast mode [ 509.421619][T24793] hsr_slave_0: entered allmulticast mode [ 509.428005][T24793] veth1_to_hsr: entered allmulticast mode [ 509.435168][T24793] hsr_slave_1: entered allmulticast mode [ 509.442535][T24793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 509.452937][T24793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 509.463856][T24793] hsr0: entered allmulticast mode [ 509.470424][T24793] veth1_virt_wifi: entered allmulticast mode [ 509.477490][T24793] veth0_virt_wifi: entered allmulticast mode [ 509.484752][T24793] virt_wifi0: entered allmulticast mode [ 509.490717][T24793] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 509.517103][ T5745] lo speed is unknown, defaulting to 1000 [ 509.525045][ T5745] syz2: Port: 1 Link ACTIVE [ 509.799740][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.084616][T24818] netlink: 'syz.0.8803': attribute type 2 has an invalid length. [ 510.099081][T24818] netlink: 'syz.0.8803': attribute type 1 has an invalid length. [ 510.113820][T24818] nbd: illegal input index 65544 [ 510.437942][T24829] erspan0: entered promiscuous mode [ 510.452478][T24829] erspan0: left allmulticast mode [ 510.468491][T24829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8809'. [ 510.604566][T24833] lo speed is unknown, defaulting to 1000 [ 510.640464][T24833] wlan0 speed is unknown, defaulting to 1000 [ 510.803835][T24844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8815'. [ 511.025533][T24848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8815'. [ 511.061958][T24848] nbd: device at index 64 is going down [ 511.346174][ T5628] udevd[5628]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 512.919667][ C1] net_ratelimit: 3 callbacks suppressed [ 512.919772][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 513.497629][T24926] netlink: 'syz.3.8846': attribute type 30 has an invalid length. [ 513.518325][T24926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8846'. [ 513.961774][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 513.974699][T24944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8854'. [ 514.191437][T24954] sit0: left allmulticast mode [ 514.824928][T24984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8872'. [ 514.848935][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.999615][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.039667][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.085221][T25041] pim6reg1: entered allmulticast mode [ 516.263922][T25048] lo: entered allmulticast mode [ 516.285315][T25048] tunl0: entered allmulticast mode [ 516.292433][T25048] gre0: left promiscuous mode [ 516.302401][T25048] gretap0: entered allmulticast mode [ 516.310987][T25048] erspan0: entered allmulticast mode [ 516.319306][T25048] ip_vti0: entered allmulticast mode [ 516.327194][T25048] ip6_vti0: entered allmulticast mode [ 516.336326][T25048] sit0: entered allmulticast mode [ 516.356333][T25048] ip6tnl0: entered allmulticast mode [ 516.367958][T25048] ip6gre0: entered allmulticast mode [ 516.375434][T25048] syz_tun: entered allmulticast mode [ 516.384577][T25048] bridge0: entered allmulticast mode [ 516.392480][T25048] vcan0: entered allmulticast mode [ 516.399293][T25048] bond0: entered allmulticast mode [ 516.405737][T25048] bond_slave_0: entered allmulticast mode [ 516.411824][T25048] bond_slave_1: entered allmulticast mode [ 516.419405][T25048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.428222][T25048] team0: entered allmulticast mode [ 516.433589][T25048] team_slave_0: entered allmulticast mode [ 516.447299][T25048] team_slave_1: entered allmulticast mode [ 516.456648][T25048] dummy0: entered allmulticast mode [ 516.466131][T25048] nlmon0: entered allmulticast mode [ 516.493905][T25048] batadv0: entered allmulticast mode [ 516.504685][T25048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.513542][T25048] vxcan0: entered allmulticast mode [ 516.520262][T25048] vxcan1: entered allmulticast mode [ 516.526932][T25048] veth0: entered allmulticast mode [ 516.533834][T25048] veth1: entered allmulticast mode [ 516.542555][T25048] wg0: entered allmulticast mode [ 516.553052][T25048] wg1: entered allmulticast mode [ 516.560227][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.569361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.579249][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.582655][T25048] wg2: entered allmulticast mode [ 516.591977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.605539][T25048] veth0_to_bridge: entered allmulticast mode [ 516.616088][T25048] veth1_to_bridge: entered allmulticast mode [ 516.625858][T25048] veth0_to_bond: entered allmulticast mode [ 516.634988][T25048] veth1_to_bond: entered allmulticast mode [ 516.644297][T25048] veth0_to_team: entered allmulticast mode [ 516.655772][T25048] C: entered allmulticast mode [ 516.665760][T25048] veth0_to_batadv: entered allmulticast mode [ 516.676615][T25048] batadv_slave_0: entered allmulticast mode [ 516.690620][T25048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.710499][T25048] veth1_to_batadv: entered allmulticast mode [ 516.720235][T25048] batadv_slave_1: entered allmulticast mode [ 516.740816][T25048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.773887][T25048] xfrm0: entered allmulticast mode [ 516.794713][T25048] veth0_to_hsr: entered allmulticast mode [ 516.824939][T25048] hsr_slave_0: entered allmulticast mode [ 516.846702][T25048] veth1_to_hsr: entered allmulticast mode [ 516.867484][T25048] hsr_slave_1: entered allmulticast mode [ 516.881968][T25048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 516.908203][T25048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.939665][T25048] hsr0: entered allmulticast mode [ 516.952173][T25048] veth1_virt_wifi: entered allmulticast mode [ 516.977725][T25048] veth0_virt_wifi: entered allmulticast mode [ 516.995767][T25048] virt_wifi0: entered allmulticast mode [ 517.000251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.028036][T25051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8903'. [ 517.077510][ T76] bridge0: port 1(() entered blocking state [ 517.083644][ T76] bridge0: port 1(() entered forwarding state [ 517.147646][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.154860][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.252463][T25072] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 517.563232][T25081] netlink: 'syz.0.8915': attribute type 1 has an invalid length. [ 518.031715][T25099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8923'. [ 518.042233][ C1] net_ratelimit: 2 callbacks suppressed [ 518.043611][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.119619][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 518.157295][T25101] syzkaller1: entered promiscuous mode [ 518.181622][T25101] syzkaller1: entered allmulticast mode [ 518.529703][T25118] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8928'. [ 519.079642][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.159733][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.297512][T25160] lo speed is unknown, defaulting to 1000 [ 519.323953][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.340943][T25167] syzkaller1: entered promiscuous mode [ 519.356781][T25167] syzkaller1: entered allmulticast mode [ 519.470659][T25160] wlan0 speed is unknown, defaulting to 1000 [ 519.591984][T25177] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8958'. [ 520.077445][T25163] dvmrp0: entered allmulticast mode [ 520.119671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.195650][T25203] netlink: 'syz.2.8969': attribute type 4 has an invalid length. [ 520.200249][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 520.394100][T25204] lo speed is unknown, defaulting to 1000 [ 520.446114][T25204] wlan0 speed is unknown, defaulting to 1000 [ 520.602156][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.611309][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.621667][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.882396][T25226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8980'. [ 521.372051][T25241] netlink: 'syz.1.8985': attribute type 10 has an invalid length. [ 521.687890][T25249] erspan0: left promiscuous mode [ 523.239668][ C1] net_ratelimit: 9 callbacks suppressed [ 523.239688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.319691][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 523.828296][T25328] bond0: left allmulticast mode [ 524.052820][T25338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.279928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.359630][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 524.828640][T25369] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9043'. [ 524.855436][T25369] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9043'. [ 524.993605][T25373] nbd: nbd1 already in use [ 525.006141][T25373] block nbd1: NBD_DISCONNECT [ 525.018532][T25373] block nbd1: Send disconnect failed -32 [ 525.043113][T25373] block nbd1: Send disconnect failed -32 [ 525.053114][T25373] block nbd1: shutting down sockets [ 525.080336][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.319674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.399711][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 526.131373][T25401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9056'. [ 526.359811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.368844][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.584491][T25447] syzkaller1: entered promiscuous mode [ 527.591502][T25447] syzkaller1: entered allmulticast mode [ 527.998205][T25470] lo speed is unknown, defaulting to 1000 [ 528.015581][T25470] wlan0 speed is unknown, defaulting to 1000 [ 528.280457][ T35] net_ratelimit: 15 callbacks suppressed [ 528.280486][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.295413][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.324650][T25483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9088'. [ 528.439746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.519990][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 528.840170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.117377][T25517] netlink: 566 bytes leftover after parsing attributes in process `syz.0.9101'. [ 529.479648][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.529982][T25530] lo speed is unknown, defaulting to 1000 [ 529.559709][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 529.574334][T25530] wlan0 speed is unknown, defaulting to 1000 [ 529.641381][T25539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9111'. [ 529.955617][T25548] bridge0: port 1(ip6gretap0) entered blocking state [ 529.962578][T25548] bridge0: port 1(ip6gretap0) entered forwarding state [ 529.993688][T25548] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.031419][T25548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.064196][T25548] wireguard: wg0: Could not create IPv4 socket [ 530.078109][T25548] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 530.118166][ T5627] syz1: Port: 1 Link ACTIVE [ 530.519955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.599631][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 531.490449][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 532.234916][T25623] lo speed is unknown, defaulting to 1000 [ 532.252898][T25623] wlan0 speed is unknown, defaulting to 1000 [ 532.763849][ T1587] block nbd0: Possible stuck request ffff888027bfe000: control (read@0,1024B). Runtime 120 seconds [ 532.892527][T25628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9146'. [ 533.639881][ C1] net_ratelimit: 10 callbacks suppressed [ 533.639901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.719721][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 533.859786][T25666] team0: entered promiscuous mode [ 533.869906][T25666] team_slave_0: entered promiscuous mode [ 533.887458][T25666] team_slave_1: entered promiscuous mode [ 533.895513][T25666] team0: Cannot enslave team device to itself [ 534.041112][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.049501][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.680843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.759718][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 534.957914][T25713] IPVS: set_ctl: invalid protocol: 103 172.20.20.56:20004 [ 535.719644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.961460][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.055344][T25772] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9216'. [ 536.127833][T25776] netlink: 766 bytes leftover after parsing attributes in process `syz.3.9218'. [ 536.599427][T25804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9231'. [ 536.611465][T25804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9231'. [ 536.622866][T25804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9231'. [ 536.745406][ T29] audit: type=1804 audit(1785163644.653:9): pid=25806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9232" name="/newroot/1863/memory.events" dev="tmpfs" ino=9379 res=1 errno=0 [ 536.761190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.242495][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.110313][T25862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9256'. [ 538.357929][T25868] lo speed is unknown, defaulting to 1000 [ 538.395201][T25868] wlan0 speed is unknown, defaulting to 1000 [ 538.839645][ C1] net_ratelimit: 5 callbacks suppressed [ 538.839663][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.949236][T25889] netlink: 136 bytes leftover after parsing attributes in process `syz.3.9265'. [ 539.238635][T25900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9269'. [ 539.430445][T25904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9271'. [ 539.448194][T25904] netlink: 'syz.3.9271': attribute type 10 has an invalid length. [ 539.467000][T25904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9271'. [ 539.816066][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.824445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.880007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.270582][T25942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.400877][T25948] netlink: 7 bytes leftover after parsing attributes in process `syz.0.9291'. [ 540.703415][T25961] lo speed is unknown, defaulting to 1000 [ 540.712063][T25961] wlan0 speed is unknown, defaulting to 1000 [ 540.919789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.120744][T25973] syzkaller1: entered promiscuous mode [ 541.139887][T25973] syzkaller1: entered allmulticast mode [ 541.489079][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9306'. [ 541.511053][T25986] netlink: 'syz.1.9306': attribute type 29 has an invalid length. [ 541.531619][T25986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9306'. [ 541.669326][T25992] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9308'. [ 541.701702][T25962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9297'. [ 541.721415][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.959652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.362357][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.001149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.039752][ C1] net_ratelimit: 6 callbacks suppressed [ 544.039770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.346370][T26112] syzkaller1: entered promiscuous mode [ 544.375851][T26112] syzkaller1: entered allmulticast mode [ 544.746617][T26139] __nla_validate_parse: 2 callbacks suppressed [ 544.746635][T26139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9367'. [ 544.797755][T26139] netlink: 'syz.1.9367': attribute type 7 has an invalid length. [ 544.818808][T26139] netlink: 'syz.1.9367': attribute type 8 has an invalid length. [ 544.837040][T26142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9368'. [ 544.850561][T26139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9367'. [ 544.870312][T26142] netlink: 'syz.2.9368': attribute type 2 has an invalid length. [ 545.052016][T26154] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 545.079689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.486962][T26179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9377'. [ 545.508928][T26179] hsr_slave_0: left promiscuous mode [ 545.532694][T26179] hsr_slave_1: left promiscuous mode [ 545.560266][ T1055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.568601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.763936][T26187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9383'. [ 545.931333][T26192] lo speed is unknown, defaulting to 1000 [ 545.951103][T26192] wlan0 speed is unknown, defaulting to 1000 [ 546.119999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.813604][T26236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9403'. [ 546.921128][T26194] dvmrp0: entered allmulticast mode [ 547.134747][T26251] netlink: 'syz.0.9410': attribute type 11 has an invalid length. [ 547.159635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.352433][T26257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9413'. [ 547.483164][ T1055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.501401][T26261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9415'. [ 547.817415][T26276] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9422'. [ 547.853715][T26276] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9422'. [ 548.121810][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.199627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.429199][T26309] netlink: 'syz.1.9435': attribute type 11 has an invalid length. [ 548.469716][T26309] netlink: 'syz.1.9435': attribute type 11 has an invalid length. [ 548.511151][T26313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.630396][T26320] syzkaller1: entered promiscuous mode [ 548.637647][T26320] syzkaller1: entered allmulticast mode [ 548.711652][T26325] syzkaller1: entered promiscuous mode [ 548.717483][T26325] syzkaller1: entered allmulticast mode [ 549.239901][ C1] net_ratelimit: 7 callbacks suppressed [ 549.239919][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.403168][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.412337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.279615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.477043][T26402] lo speed is unknown, defaulting to 1000 [ 550.526136][T26402] wlan0 speed is unknown, defaulting to 1000 [ 551.319734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.328024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.337003][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.537523][T26447] syzkaller1: entered promiscuous mode [ 551.559804][T26447] syzkaller1: entered allmulticast mode [ 551.812716][T26456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.853932][T26449] lo speed is unknown, defaulting to 1000 [ 551.925116][T26449] wlan0 speed is unknown, defaulting to 1000 [ 552.359967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.377127][ T5618] cgroup: fork rejected by pids controller in /syz2 [ 552.516173][T26477] __nla_validate_parse: 4 callbacks suppressed [ 552.516191][T26477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9498'. [ 552.595314][T26478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9498'. [ 553.250744][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.465299][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.477040][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.485025][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.493455][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.501281][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.838680][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 553.853290][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 553.862413][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 553.874205][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 553.891720][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 553.972400][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9509'. [ 554.009126][T26507] netlink: 'syz.4.9509': attribute type 21 has an invalid length. [ 554.439636][ C1] net_ratelimit: 4 callbacks suppressed [ 554.439654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.692376][T26499] lo speed is unknown, defaulting to 1000 [ 554.709246][T26499] wlan0 speed is unknown, defaulting to 1000 [ 554.786240][T26541] sock: sock_set_timeout: `syz.0.9520' (pid 26541) tries to set negative timeout [ 555.163287][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.171985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.449311][T26566] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9531'. [ 555.479936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.793965][T26499] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.801783][T26499] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.808993][T26499] bridge_slave_0: entered allmulticast mode [ 555.816879][T26499] bridge_slave_0: entered promiscuous mode [ 555.827425][T26588] batadv_slave_1: entered promiscuous mode [ 555.839047][T26499] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.846962][T26499] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.854567][T26499] bridge_slave_1: entered allmulticast mode [ 555.862956][T26499] bridge_slave_1: entered promiscuous mode [ 555.901542][T26586] batadv_slave_1: left promiscuous mode [ 555.926033][T26499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.955379][T26499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.960037][ T5633] Bluetooth: hci2: command tx timeout [ 555.981950][T26165] tipc: Subscription rejected, illegal request [ 556.062057][T26499] team0: Port device team_slave_0 added [ 556.081837][T26499] team0: Port device team_slave_1 added [ 556.119643][T26499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.126784][T26499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.153411][T26499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.175010][T26499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.196419][T26499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.243646][T26499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.400077][T26610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.412451][T26499] hsr_slave_0: entered promiscuous mode [ 556.419424][T26610] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.448397][T26499] hsr_slave_1: entered promiscuous mode [ 556.460657][T26499] debugfs: 'hsr0' already exists in 'hsr' [ 556.471015][T26499] Cannot create hsr debugfs directory [ 556.519641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.792795][T26623] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 557.090957][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.039595][ T5633] Bluetooth: hci2: command tx timeout [ 559.639779][ C1] net_ratelimit: 5 callbacks suppressed [ 559.639798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.655795][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.664138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.119736][ T5633] Bluetooth: hci2: command tx timeout [ 560.679671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.894664][T26499] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 560.923223][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.931647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.957826][T26499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 560.979775][T26499] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 561.022748][T26499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.042320][T26499] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 561.063833][T26499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 561.073210][T26499] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 561.108332][T26499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 561.266547][T26723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9598'. [ 561.296977][T26723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9598'. [ 561.399922][T26499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.421402][T26499] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.441019][T26167] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.448314][T26167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.513098][T26165] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.520311][T26165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.538667][T26734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9602'. [ 561.568023][T26734] ip6gre2: entered promiscuous mode [ 561.574406][T26734] ip6gre2: entered allmulticast mode [ 561.583109][ T35] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 561.593220][ T35] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 561.619894][ T5745] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 561.719895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.923537][T26755] trusted_key: syz.4.9609 sent an empty control message without MSG_MORE. [ 562.200467][ T5633] Bluetooth: hci2: command tx timeout [ 562.213266][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.222003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.262123][T26499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.328820][T26499] veth0_vlan: entered promiscuous mode [ 562.346949][T26499] veth1_vlan: entered promiscuous mode [ 562.361657][ T5745] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 562.396802][T26499] veth0_macvtap: entered promiscuous mode [ 562.417231][T26499] veth1_macvtap: entered promiscuous mode [ 562.453454][ T5745] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 562.461588][T26499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.502278][T26499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.532039][T26772] netlink: 'syz.0.9614': attribute type 15 has an invalid length. [ 562.543664][T26772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9614'. [ 562.561720][T26167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.580067][T26167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.627361][T26167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.671239][T26167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.759641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.813154][T26165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.837654][T26165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.856260][ T1587] block nbd0: Possible stuck request ffff888027bfe000: control (read@0,1024B). Runtime 150 seconds [ 562.867750][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.875865][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.934699][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.947567][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.248995][T26794] syzkaller1: entered promiscuous mode [ 563.270278][T26794] syzkaller1: entered allmulticast mode [ 563.281875][T26795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 563.510348][T26801] netlink: 'syz.0.9627': attribute type 5 has an invalid length. [ 564.772122][ T35] net_ratelimit: 2 callbacks suppressed [ 564.772142][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.241873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.399957][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 565.410795][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.421691][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.446423][T26908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9675'. [ 565.489236][T26908] team0: Port device team_slave_0 removed [ 565.524770][T26910] lo speed is unknown, defaulting to 1000 [ 565.545035][T26910] wlan0 speed is unknown, defaulting to 1000 [ 565.986273][T26929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.031959][T26929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.050493][T26929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.092125][T26929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.107174][T26935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9686'. [ 566.121576][T26929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.172828][T26927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.423639][T26948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9691'. [ 566.522983][T26911] dvmrp0: entered allmulticast mode [ 567.811225][T27000] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9712'. [ 568.127911][T27015] tun0: tun_chr_ioctl cmd 1074025675 [ 568.133952][T27015] tun0: persist enabled [ 568.146432][T27015] tun0: tun_chr_ioctl cmd 1074025675 [ 568.162875][T27015] tun0: persist disabled [ 568.639485][T27046] batadv_slave_0: entered promiscuous mode [ 568.652220][T27042] batadv_slave_0: left promiscuous mode [ 568.840838][T27057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9736'. [ 568.854838][T27057] netlink: 'syz.1.9736': attribute type 20 has an invalid length. [ 568.876619][T27057] netlink: 'syz.1.9736': attribute type 21 has an invalid length. [ 568.914613][T27051] IPVS: Scheduler module ip_vs_sip not found [ 568.925387][T27058] netlink: 'syz.0.9737': attribute type 25 has an invalid length. [ 568.936403][T27058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9737'. [ 569.256643][T27079] smc: net device lo applied user defined pnetid SYZ2 [ 569.273633][T27081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9746'. [ 569.291060][T27079] smc: net device lo erased user defined pnetid SYZ2 [ 569.612231][T27099] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9755'. [ 569.885664][ T35] net_ratelimit: 10 callbacks suppressed [ 569.885681][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.439671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.518610][T27137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9772'. [ 570.530007][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.538238][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.546840][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.007756][T27162] netlink: 'syz.4.9782': attribute type 11 has an invalid length. [ 571.047239][T27162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9782'. [ 571.479999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.440912][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.449324][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.519593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.089872][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 573.398553][ T29] audit: type=1804 audit(1785163681.303:10): pid=27245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9820" name="/newroot/2000/memory.events" dev="tmpfs" ino=10077 res=1 errno=0 [ 573.458050][ T29] audit: type=1800 audit(1785163681.303:11): pid=27245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9820" name="memory.events" dev="tmpfs" ino=10077 res=0 errno=0 [ 573.514453][ T29] audit: type=1804 audit(1785163681.343:12): pid=27245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9820" name="/newroot/2000/memory.events" dev="tmpfs" ino=10077 res=1 errno=0 [ 573.559806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.642278][ C0] net_ratelimit: 6 callbacks suppressed [ 575.642307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.653830][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.666118][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.006202][T27376] bond2: option tlb_dynamic_lb: invalid value (128) [ 576.015191][T27376] bond2 (unregistering): Released all slaves [ 576.155884][T27387] syzkaller1: entered promiscuous mode [ 576.170201][T27387] syzkaller1: entered allmulticast mode [ 576.282753][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.291211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.469949][T27392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.478707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.553311][T27407] tipc: Started in network mode [ 576.558398][T27407] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 576.620478][T27405] lo speed is unknown, defaulting to 1000 [ 576.656343][T27405] wlan0 speed is unknown, defaulting to 1000 [ 576.679673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.719996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.201104][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.757091][T27514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9934'. [ 580.031683][T27524] syzkaller1: entered promiscuous mode [ 580.052463][T27524] syzkaller1: entered allmulticast mode [ 580.802118][T27568] bridge0: port 1(vlan2) entered blocking state [ 580.818761][T27568] bridge0: port 1(vlan2) entered disabled state [ 580.829869][T27568] vlan2: entered allmulticast mode [ 580.839679][T27568] geneve0: entered allmulticast mode [ 580.849850][ C0] net_ratelimit: 5 callbacks suppressed [ 580.849867][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.868584][T27568] vlan2: entered promiscuous mode [ 580.879594][T27568] geneve0: entered promiscuous mode [ 581.178699][T27584] lo speed is unknown, defaulting to 1000 [ 581.186723][T27584] wlan0 speed is unknown, defaulting to 1000 [ 581.400799][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.411115][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.450159][T27592] bond1 (unregistering): Released all slaves [ 581.516404][T27597] gtp0: entered promiscuous mode [ 581.528174][T27597] gtp0: entered allmulticast mode [ 581.552780][T27597] team0: Device gtp0 is of different type [ 581.879791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.954978][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9978'. [ 582.042545][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.051066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.124581][T27620] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 582.336260][T27631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9987'. [ 582.357747][T27631] netlink: 'syz.3.9987': attribute type 10 has an invalid length. [ 582.366400][T27631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9987'. [ 582.382904][T27631] geneve4: entered promiscuous mode [ 582.388264][T27631] geneve4: entered allmulticast mode [ 582.817688][T27652] netlink: 11 bytes leftover after parsing attributes in process `syz.1.9997'. [ 582.919617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.321817][ T3332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.330214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.961461][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.971969][T27704] netlink: 'syz.3.10021': attribute type 4 has an invalid length. [ 584.177149][ T24] IPVS: starting estimator thread 0... [ 584.272621][T27719] IPVS: using max 25 ests per chain, 60000 per kthread [ 584.328053][T27731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10034'. [ 584.337593][T27731] netlink: 'syz.3.10034': attribute type 10 has an invalid length. [ 584.353608][T27732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10033'. [ 584.382022][T27732] netlink: 'syz.4.10033': attribute type 5 has an invalid length. [ 584.400759][T27732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10033'. [ 584.424714][T27733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10033'. [ 584.448157][T27733] netlink: 'syz.4.10033': attribute type 5 has an invalid length. [ 584.458759][T27733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10033'. [ 584.474242][T27736] dvmrp0: left allmulticast mode [ 585.041041][T27767] syzkaller1: entered promiscuous mode [ 585.053237][T27767] syzkaller1: entered allmulticast mode [ 585.743892][T27800] lo speed is unknown, defaulting to 1000 [ 585.796920][T27800] wlan0 speed is unknown, defaulting to 1000 [ 586.039731][ C0] net_ratelimit: 3 callbacks suppressed [ 586.039750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.370277][T27826] lo speed is unknown, defaulting to 1000 [ 586.396149][T27826] wlan0 speed is unknown, defaulting to 1000 [ 586.673524][T27840] netlink: 'syz.3.10074': attribute type 2 has an invalid length. [ 586.702458][T27840] netlink: 'syz.3.10074': attribute type 1 has an invalid length. [ 586.726669][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10074'. [ 586.757049][T27840] nbd: illegal input index -120127480 [ 586.899826][T27846] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 586.936469][T27852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10078'. [ 586.937233][T27846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.956386][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 586.959974][T27852] netlink: 356 bytes leftover after parsing attributes in process `syz.3.10078'. [ 586.991381][T27852] netlink: 68 bytes leftover after parsing attributes in process `syz.3.10078'. [ 587.022844][T27852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10078'. [ 587.079847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.160555][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.168739][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.735546][T27879] sctp: [Deprecated]: syz.0.10086 (pid 27879) Use of int in max_burst socket option deprecated. [ 587.735546][T27879] Use struct sctp_assoc_value instead [ 587.799810][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 587.804322][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.816930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.119719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.727718][T27901] bridge0: port 4(syz_tun) entered blocking state [ 588.738300][T27901] bridge0: port 4(syz_tun) entered disabled state [ 588.746322][T27901] syz_tun: entered allmulticast mode [ 588.771773][T27901] syz_tun: entered promiscuous mode [ 588.964016][T27912] syzkaller1: entered promiscuous mode [ 588.978641][T27912] syzkaller1: entered allmulticast mode [ 589.285676][T27931] netlink: 204 bytes leftover after parsing attributes in process `syz.0.10109'. [ 589.714533][T27951] tipc: Started in network mode [ 589.730749][T27951] tipc: Node identity ac1414aa, cluster identity 4711 [ 589.743708][T27951] tipc: Enabled bearer , priority 10 [ 590.000900][T27969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10125'. [ 590.308011][T27983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10132'. [ 590.362251][T27987] block nbd1: Unsupported socket: should be TCP or UNIX. [ 590.860482][ T24] tipc: Node number set to 2886997162 [ 590.974805][T28024] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10149'. [ 591.157656][T28034] team0 (unregistering): Port device team_slave_0 removed [ 591.171132][T28034] team0 (unregistering): Port device team_slave_1 removed [ 591.239795][ C0] net_ratelimit: 6 callbacks suppressed [ 591.239814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.294134][T28040] netlink: 'syz.2.10157': attribute type 2 has an invalid length. [ 591.308091][T28040] netlink: 'syz.2.10157': attribute type 2 has an invalid length. [ 591.510927][T28050] netlink: 'syz.2.10161': attribute type 11 has an invalid length. [ 591.531200][T28050] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10161'. [ 591.681967][T28061] veth0_to_batadv: left allmulticast mode [ 591.688359][T28061] netlink: 'syz.1.10167': attribute type 2 has an invalid length. [ 591.711131][T28061] netlink: 'syz.1.10167': attribute type 2 has an invalid length. [ 591.831601][T28065] sctp: [Deprecated]: syz.1.10169 (pid 28065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.831601][T28065] Use struct sctp_sack_info instead [ 591.873470][T28065] sctp: [Deprecated]: syz.1.10169 (pid 28065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.873470][T28065] Use struct sctp_sack_info instead [ 592.159761][T28076] ieee802154 phy0 wpan0: encryption failed: -90 [ 592.275477][T28081] netlink: 'syz.3.10176': attribute type 11 has an invalid length. [ 592.290732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.922133][ T1587] block nbd0: Possible stuck request ffff888027bfe000: control (read@0,1024B). Runtime 180 seconds [ 592.936800][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.950216][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.026389][T28115] netlink: 'syz.0.10192': attribute type 1 has an invalid length. [ 593.034435][T28115] netlink: 'syz.0.10192': attribute type 2 has an invalid length. [ 593.183730][T28127] __nla_validate_parse: 2 callbacks suppressed [ 593.183748][T28127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10197'. [ 593.314459][T28134] vxcan0: tx address claim with dlc 0 [ 593.438187][ T4987] udevd[4987]: worker [6470] /devices/virtual/block/nbd0 timeout; kill it [ 593.459252][ T4987] udevd[4987]: seq 21052 '/devices/virtual/block/nbd0' killed [ 593.560152][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 593.568029][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.576496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.742857][T28152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10208'. [ 593.754934][T28152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10208'. [ 594.203524][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.495385][T28199] netlink: 'syz.1.10231': attribute type 2 has an invalid length. [ 594.723136][T28213] netlink: 'syz.2.10237': attribute type 10 has an invalid length. [ 594.841583][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.850130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.146657][T28224] syzkaller1: entered promiscuous mode [ 595.156738][T28224] syzkaller1: entered allmulticast mode [ 595.239604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.287935][T28240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10245'. [ 595.315461][T28240] netlink: 'syz.3.10245': attribute type 7 has an invalid length. [ 595.341223][T28240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10245'. [ 595.763827][T28268] bond0: invalid NS target ff00:: specified for addition [ 595.778086][T28268] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 596.114775][T28291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10268'. [ 596.279643][ C1] net_ratelimit: 4 callbacks suppressed [ 596.279665][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.680379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.197839][T28337] syzkaller1: entered promiscuous mode [ 597.203723][T28337] syzkaller1: entered allmulticast mode [ 597.319843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.559006][T28351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10295'. [ 597.776732][T28364] sctp: [Deprecated]: syz.3.10303 (pid 28364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.776732][T28364] Use struct sctp_sack_info instead [ 597.795252][T28364] sctp: [Deprecated]: syz.3.10303 (pid 28364) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.795252][T28364] Use struct sctp_sack_info instead [ 597.974073][T28372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10306'. [ 598.041807][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.244630][T28389] validate_nla: 1 callbacks suppressed [ 598.244742][T28389] netlink: 'syz.3.10313': attribute type 4 has an invalid length. [ 598.260603][T28389] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10313'. [ 598.298074][T26165] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 598.359662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.683178][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.764088][T28421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10327'. [ 598.786113][T28421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10327'. [ 598.808171][T28421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10327'. [ 598.817775][T28421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10327'. [ 599.399619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.961362][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.969908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.018100][T28455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10343'. [ 600.037445][T28455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10343'. [ 600.295774][T28464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.822271][T28485] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10358'. [ 601.210494][T28506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10367'. [ 601.473671][T28518] netlink: 'syz.4.10372': attribute type 21 has an invalid length. [ 601.479839][ C1] net_ratelimit: 8 callbacks suppressed [ 601.479867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.493765][T28518] netlink: 'syz.4.10372': attribute type 22 has an invalid length. [ 601.515514][T28518] netlink: 'syz.4.10372': attribute type 23 has an invalid length. [ 601.535470][T28518] netlink: 'syz.4.10372': attribute type 25 has an invalid length. [ 601.553092][T28518] netlink: 'syz.4.10372': attribute type 26 has an invalid length. [ 601.569673][T28518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10372'. [ 602.519635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.583786][T28558] netlink: 'syz.1.10390': attribute type 4 has an invalid length. [ 602.647548][T28558] netlink: 'syz.1.10390': attribute type 4 has an invalid length. [ 602.663586][ T10] lo speed is unknown, defaulting to 1000 [ 602.663942][ T24] lo speed is unknown, defaulting to 1000 [ 603.040382][T28573] netlink: 'syz.1.10398': attribute type 1 has an invalid length. [ 603.181846][T28581] ip6gre1: entered allmulticast mode [ 603.195468][T26167] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 603.568271][T28593] pim6reg1: entered promiscuous mode [ 603.574536][T28593] pim6reg1: entered allmulticast mode [ 603.719769][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.801610][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.819680][T28606] __nla_validate_parse: 3 callbacks suppressed [ 603.822400][T28606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10411'. [ 604.248139][T28622] netlink: 'syz.2.10417': attribute type 1 has an invalid length. [ 604.441246][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.759643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.086166][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.094661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.105422][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.113757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.193285][T28710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10455'. [ 606.202998][T28710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10455'. [ 606.220468][T28710] geneve5: entered promiscuous mode [ 606.225878][T28710] geneve5: entered allmulticast mode [ 606.253136][T28713] bond0: (slave bond_slave_1): Releasing backup interface [ 606.849826][ C0] net_ratelimit: 2 callbacks suppressed [ 606.849840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.000627][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.008997][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.079681][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 607.528550][T28633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.818355][T28752] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.10472'. [ 607.879664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.464971][T28794] netlink: 'syz.4.10488': attribute type 4 has an invalid length. [ 608.516369][T28795] netlink: 'syz.4.10488': attribute type 4 has an invalid length. [ 608.705103][T28807] netlink: 'syz.3.10496': attribute type 3 has an invalid length. [ 608.717667][T28805] lo speed is unknown, defaulting to 1000 [ 608.724278][T28807] netlink: 'syz.3.10496': attribute type 1 has an invalid length. [ 608.740193][T28807] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10496'. [ 608.757868][T28805] wlan0 speed is unknown, defaulting to 1000 [ 608.864908][T28814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.886852][T28814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.907767][T28814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.919945][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.924617][T26165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.979024][T28813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.033594][T28821] bond2: (slave 26±ÿ): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 609.060769][T28821] bond2: (slave 26±ÿ): Enslaving as an active interface with an up link [ 609.338179][T28835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10506'. [ 609.363244][T28835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.10506'. [ 609.385576][T28835] netlink: 'syz.0.10506': attribute type 32 has an invalid length. [ 609.401497][T28835] netlink: 500 bytes leftover after parsing attributes in process `syz.0.10506'. [ 609.969211][T28862] netlink: 'syz.0.10516': attribute type 2 has an invalid length. [ 610.074171][T28868] netlink: 204 bytes leftover after parsing attributes in process `syz.0.10519'. [ 610.099823][T28868] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10519'. [ 610.339213][ T29] audit: type=1800 audit(1785163718.243:13): pid=28878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10523" name="blkio.bfq.time_recursive" dev="tmpfs" ino=10835 res=0 errno=0 [ 610.812850][T28892] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.828785][T28892] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.848284][T28898] netlink: 'syz.2.10528': attribute type 16 has an invalid length. [ 610.883757][T28898] netlink: 'syz.2.10528': attribute type 17 has an invalid length. [ 611.048262][T28898] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.055539][T28898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.081941][T28898] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.089171][T28898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.260831][T28898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.879697][ C1] net_ratelimit: 9 callbacks suppressed [ 611.879719][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.702351][T28934] netlink: 'syz.4.10545': attribute type 2 has an invalid length. [ 612.723626][T28934] netlink: 'syz.4.10545': attribute type 2 has an invalid length. [ 612.763459][T26167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.772193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.919612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.049944][T28957] netlink: 'syz.1.10556': attribute type 4 has an invalid length. [ 613.093077][T24662] lo speed is unknown, defaulting to 1000 [ 613.116379][T24662] syz2: Port: 1 Link DOWN [ 613.959847][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.178682][T29019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10581'. [ 614.206528][T29021] netlink: 'syz.4.10582': attribute type 1 has an invalid length. [ 614.290982][T29021] 8021q: adding VLAN 0 to HW filter on device bond5 [ 614.367378][T29025] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 614.424729][T29034] netlink: 'syz.1.10583': attribute type 16 has an invalid length. [ 614.495651][T29034] netlink: 'syz.1.10583': attribute type 17 has an invalid length. [ 614.604369][T29034] lo: left allmulticast mode [ 614.672755][T29034] tunl0: left allmulticast mode [ 614.731548][T29034] gre0: left allmulticast mode [ 614.746949][T29034] gretap0: left allmulticast mode [ 614.778721][T29034] ip_vti0: left allmulticast mode [ 614.807998][T29034] ip6_vti0: left allmulticast mode [ 614.833727][T29047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10587'. [ 614.845613][T29034] ip6tnl0: left allmulticast mode [ 614.855417][T29047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10587'. [ 614.865719][T29047] netlink: 'syz.2.10587': attribute type 7 has an invalid length. [ 614.875022][T29034] ip6gre0: left allmulticast mode [ 614.882004][T29034] syz_tun: left allmulticast mode [ 614.888056][T29034] ip6gretap0: left allmulticast mode [ 614.897171][T29034] vcan0: left allmulticast mode [ 614.904881][T29034] bond0: left allmulticast mode [ 614.912804][T29034] nlmon0: left allmulticast mode [ 614.918754][T29034] batadv0: left allmulticast mode [ 614.927710][T29034] vxcan0: left allmulticast mode [ 614.934066][T29034] vxcan1: left allmulticast mode [ 614.941213][T29034] veth0: left allmulticast mode [ 614.946963][T29034] veth1: left allmulticast mode [ 614.961316][T29034] wg0: left allmulticast mode [ 614.970951][T29034] wg1: left allmulticast mode [ 614.976612][T29034] wg2: left allmulticast mode [ 614.983616][T29034] veth0_to_bridge: left allmulticast mode [ 614.992227][T29034] bridge_slave_0: left allmulticast mode [ 614.999051][T29034] veth1_to_bridge: left allmulticast mode [ 615.005467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.021874][T29034] bridge_slave_1: left allmulticast mode [ 615.028496][T29034] veth0_to_bond: left allmulticast mode [ 615.035593][T29034] bond_slave_0: left allmulticast mode [ 615.043198][T29034] veth1_to_bond: left allmulticast mode [ 615.051533][T29034] bond_slave_1: left allmulticast mode [ 615.058005][T29034] veth0_to_team: left allmulticast mode [ 615.066523][T29034] team_slave_0: left allmulticast mode [ 615.074001][T29034] veth1_to_team: left allmulticast mode [ 615.083542][T29034] team_slave_1: left allmulticast mode [ 615.091453][T29034] batadv_slave_0: left allmulticast mode [ 615.098183][T29034] veth1_to_batadv: left allmulticast mode [ 615.112548][T29034] batadv_slave_1: left allmulticast mode [ 615.131139][T29034] xfrm0: left allmulticast mode [ 615.143523][T29034] veth0_to_hsr: left allmulticast mode [ 615.151759][T29034] veth1_to_hsr: left allmulticast mode [ 615.162220][T29034] veth1_virt_wifi: left allmulticast mode [ 615.182465][T29034] veth0_virt_wifi: left allmulticast mode [ 615.189227][T29034] virt_wifi0: left allmulticast mode [ 615.197103][T29034] veth1_vlan: left promiscuous mode [ 615.205244][T29034] veth0_vlan: left promiscuous mode [ 615.214780][T29034] veth0_vlan: entered promiscuous mode [ 615.224254][T29034] veth1_vlan: entered promiscuous mode [ 615.232076][T29034] macvlan0: left promiscuous mode [ 615.255945][T29034] veth1_macvtap: left promiscuous mode [ 615.274755][T29034] veth0_macvtap: left promiscuous mode [ 615.282227][T29034] veth0_macvtap: entered promiscuous mode [ 615.307000][T29034] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 615.314531][T29034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.321790][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 615.340462][T29034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.348946][T29034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.358637][T29034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 615.367764][T29034] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 615.380892][T29034] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 615.399068][T29034] gretap1: left allmulticast mode [ 615.439662][T29034] veth3: left allmulticast mode [ 615.455946][T29034] gre1: left promiscuous mode [ 615.489345][T29034] veth7: left allmulticast mode [ 615.501601][T29034] geneve2: left promiscuous mode [ 615.506671][T29034] geneve2: left allmulticast mode [ 615.516777][T29034] geneve3: left promiscuous mode [ 615.523946][T29034] geneve3: left allmulticast mode [ 615.532161][T29034] ip6gre2: left promiscuous mode [ 615.537139][T29034] ip6gre2: left allmulticast mode [ 615.543744][T29034] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 615.569826][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 615.583011][T25123] lo speed is unknown, defaulting to 1000 [ 615.597899][T25123] syz2: Port: 1 Link ACTIVE [ 615.636399][T29047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10587'. [ 615.662588][T29047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10587'. [ 615.682707][ T3332] bridge0: port 1(vlan2) entered blocking state [ 615.699642][T29047] netlink: 'syz.2.10587': attribute type 7 has an invalid length. [ 615.754742][ T76] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.781814][ T76] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.802719][T29037] lo speed is unknown, defaulting to 1000 [ 615.814837][ T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 615.839112][ T35] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 615.847401][T25555] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 615.870857][ T76] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.888582][ T76] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 615.913808][T29037] wlan0 speed is unknown, defaulting to 1000 [ 615.915694][ T35] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 615.950260][ T5627] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 615.963360][ T35] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 615.979770][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 615.990880][ T5627] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 615.998752][ T76] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.025952][ T76] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.039653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.068415][ T76] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.558677][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10596'. [ 616.578489][T29083] netlink: 'syz.4.10596': attribute type 26 has an invalid length. [ 616.600249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.608722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.623688][T29083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10596'. [ 616.645131][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10596'. [ 616.665245][T29083] netlink: 'syz.4.10596': attribute type 26 has an invalid length. [ 616.696380][T29083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10596'. [ 617.079922][ C1] net_ratelimit: 4 callbacks suppressed [ 617.079942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.094125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.102841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.720099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.728758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.737355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.745868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.830679][T29116] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 618.119638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.520966][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.638855][T29150] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 618.658604][T29150] bond3 (unregistering): Released all slaves [ 620.272236][T29212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10651'. [ 621.338301][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10669'. [ 621.357937][T29217] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 621.915282][T29291] netlink: 'syz.4.10681': attribute type 16 has an invalid length. [ 621.939969][T29291] netlink: 'syz.4.10681': attribute type 17 has an invalid length. [ 622.059473][T29291] lo: left allmulticast mode [ 622.072925][T29291] tunl0: left allmulticast mode [ 622.091847][T29291] gre0: left allmulticast mode [ 622.108210][T29291] gretap0: left allmulticast mode [ 622.130976][T29291] erspan0: left allmulticast mode [ 622.151013][T29291] ip_vti0: left allmulticast mode [ 622.170566][T29291] ip6_vti0: left allmulticast mode [ 622.190966][T29291] sit0: left allmulticast mode [ 622.210538][T29291] ip6tnl0: left allmulticast mode [ 622.223170][T29291] ip6gre0: left allmulticast mode [ 622.238316][T29291] ip6gretap0: left allmulticast mode [ 622.252147][T29291] vcan0: left allmulticast mode [ 622.260348][T29291] team0: left promiscuous mode [ 622.265205][T29291] team_slave_0: left promiscuous mode [ 622.271166][T29291] team_slave_1: left promiscuous mode [ 622.276781][T29291] team0: left allmulticast mode [ 622.280016][ C1] net_ratelimit: 21 callbacks suppressed [ 622.280057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.294824][T29291] dummy0: left allmulticast mode [ 622.301804][T29291] nlmon0: left allmulticast mode [ 622.317581][T29291] vxcan0: left allmulticast mode [ 622.340605][T29291] vxcan1: left allmulticast mode [ 622.353886][T29291] veth0: left allmulticast mode [ 622.370534][T29291] veth1: left allmulticast mode [ 622.376930][T29291] wg0: left allmulticast mode [ 622.397672][T29291] wg1: left allmulticast mode [ 622.412817][T29303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10685'. [ 622.427658][T29291] wg2: left allmulticast mode [ 622.448716][T29291] veth0_to_bridge: left allmulticast mode [ 622.461318][T29291] bridge_slave_0: left allmulticast mode [ 622.475207][T29291] veth1_to_bridge: left allmulticast mode [ 622.492675][T29291] bridge_slave_1: left allmulticast mode [ 622.508063][T29291] veth0_to_bond: left allmulticast mode [ 622.517702][T29291] veth1_to_bond: left allmulticast mode [ 622.530189][T29291] veth0_to_team: left allmulticast mode [ 622.537431][T29291] team_slave_0: left allmulticast mode [ 622.545493][T29291] veth1_to_team: left allmulticast mode [ 622.552607][T29291] team_slave_1: left allmulticast mode [ 622.560195][T29291] veth1_to_batadv: left allmulticast mode [ 622.566982][T29291] batadv_slave_1: left allmulticast mode [ 622.574280][T29291] xfrm0: left allmulticast mode [ 622.607098][T29291] veth0_to_hsr: left allmulticast mode [ 622.625774][T29291] veth1_to_hsr: left allmulticast mode [ 622.644353][T29291] hsr0: left allmulticast mode [ 622.654305][T29291] hsr_slave_0: left allmulticast mode [ 622.659850][T29291] hsr_slave_1: left allmulticast mode [ 622.665993][T29291] veth1_virt_wifi: left allmulticast mode [ 622.691284][T29291] veth0_virt_wifi: left allmulticast mode [ 622.708990][T29291] virt_wifi0: left allmulticast mode [ 622.752212][T29291] veth0_vlan: left promiscuous mode [ 622.772915][T29291] veth0_vlan: entered promiscuous mode [ 622.792575][T29291] macvlan0: left promiscuous mode [ 622.814261][T29291] veth0_macvtap: left promiscuous mode [ 622.823216][T29291] veth0_macvtap: entered promiscuous mode [ 622.833233][T29291] geneve1: left promiscuous mode [ 622.852896][T29291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.861572][T29291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.870187][T29291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 622.878576][T29291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 622.894216][T29291] geneve2: left promiscuous mode [ 622.904132][T29291] bond1: left promiscuous mode [ 622.908993][T29291] bond1: left allmulticast mode [ 622.919874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.928403][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.936885][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.945343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.945979][T29291] veth3: left promiscuous mode [ 622.955097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.956232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.977245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.985679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.994109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.037764][T29291] geneve3: left promiscuous mode [ 623.064329][T29291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.082447][T29291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 623.094022][ T1587] block nbd0: Possible stuck request ffff888027bfe000: control (read@0,1024B). Runtime 210 seconds [ 623.102413][T29291] vlan2: left allmulticast mode [ 623.120549][T29291] bond0: left allmulticast mode [ 623.125563][T29291] bond_slave_0: left allmulticast mode [ 623.131982][T29291] bond_slave_1: left allmulticast mode [ 623.139227][T29291] ip6gre2: left promiscuous mode [ 623.144678][T29291] ip6gre2: left allmulticast mode [ 623.151733][T29291] ipip1: left promiscuous mode [ 623.158836][T29291] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 623.173449][T29291] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.180799][T25555] ip6_tnl_xmit_ctl: 12 callbacks suppressed [ 623.180814][T25555] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 623.195656][T29291] batadv_slave_1: entered promiscuous mode [ 623.205276][T29291] ip6gre3: left promiscuous mode [ 623.210629][T29291] ip6gre3: left allmulticast mode [ 623.246962][T25555] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 623.355622][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.379360][ T35] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.391357][T24799] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 623.552166][T29336] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 623.788800][T29345] netlink: 'syz.1.10700': attribute type 21 has an invalid length. [ 623.816548][T29345] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10700'. [ 623.835690][T29345] netlink: 'syz.1.10700': attribute type 5 has an invalid length. [ 623.849456][T29345] netlink: 'syz.1.10700': attribute type 6 has an invalid length. [ 623.862688][T29345] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10700'. [ 623.920894][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.120238][T25123] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 624.200968][T25123] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 624.210966][T24799] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.283911][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.293116][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.628495][T29372] netlink: 'syz.4.10712': attribute type 1 has an invalid length. [ 624.749432][T29372] 8021q: adding VLAN 0 to HW filter on device bond6 [ 624.833654][T29377] bond6: (slave gretap1): making interface the new active one [ 624.846604][T29377] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 626.073906][T29447] bridge0: port 1(ip6gretap0) entered disabled state [ 626.122844][T29449] netlink: 'syz.3.10738': attribute type 16 has an invalid length. [ 626.157484][T29449] netlink: 'syz.3.10738': attribute type 17 has an invalid length. [ 626.206041][T29449] 0ªî{X¹¦: left allmulticast mode [ 626.263024][T29449] bridge0: port 1(ip6gretap0) entered blocking state [ 626.269908][T29449] bridge0: port 1(ip6gretap0) entered forwarding state [ 626.320009][T29449] wireguard: wg0: Could not create IPv4 socket [ 626.839843][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 627.508073][T29516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10766'. [ 627.521341][T29516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10766'. [ 627.593654][T29520] bridge2: entered promiscuous mode [ 627.621243][T29520] bridge2: entered allmulticast mode [ 627.639657][ C0] net_ratelimit: 223 callbacks suppressed [ 627.639674][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.679733][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.401967][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 629.401987][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 629.415968][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 629.477147][T29602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10799'. [ 629.495346][T29604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10798'. [ 629.522801][T29602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 629.530257][T29606] bond3: option ad_select: unable to set because the bond device is up [ 629.549817][T29604] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10798'. [ 629.646371][T29611] netlink: 207236 bytes leftover after parsing attributes in process `syz.1.10802'. [ 629.688780][T29615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10803'. [ 629.720239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.240534][T29642] netlink: 'syz.2.10814': attribute type 13 has an invalid length. [ 630.661024][T29661] netlink: 'syz.0.10824': attribute type 16 has an invalid length. [ 630.678609][T29661] netlink: 'syz.0.10824': attribute type 17 has an invalid length. [ 630.688281][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 630.746268][T29670] netlink: 'syz.4.10825': attribute type 1 has an invalid length. [ 630.759707][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.802223][T29661] bridge0: port 4(syz_tun) entered blocking state [ 630.805382][T29670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10825'. [ 630.809033][T29661] bridge0: port 4(syz_tun) entered forwarding state [ 630.828065][T29674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10827'. [ 630.847018][T29661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.882154][T29676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10827'. [ 630.899985][T29661] 0ªX¹¦À: left allmulticast mode [ 630.910627][T29661] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 631.183590][T29661] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 631.196059][T29661] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_1 [ 631.213452][T29661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 631.225162][T29661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.239466][T29661] veth1_vlan: left promiscuous mode [ 631.253373][T29661] veth0_vlan: left promiscuous mode [ 631.262190][T29661] veth0_vlan: entered promiscuous mode [ 631.269380][T29661] veth1_vlan: entered promiscuous mode [ 631.278830][T29661] tipc: Resetting bearer [ 631.288049][T29661] tipc: Resetting bearer [ 631.299037][T29661] veth1_macvtap: left promiscuous mode [ 631.307355][T29661] veth0_macvtap: left promiscuous mode [ 631.316017][T29661] veth0_macvtap: entered promiscuous mode [ 631.324866][ T76] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.333326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.349069][T29661] veth1_macvtap: entered promiscuous mode [ 631.585207][T29661] ip6gretap0: entered promiscuous mode [ 631.611374][T29661] vlan3: left allmulticast mode [ 631.616295][T29661] bond0: left allmulticast mode [ 631.638005][T29661] bond_slave_0: left allmulticast mode [ 631.648586][T29661] bond_slave_1: left allmulticast mode [ 631.684773][T29661] 8021q: adding VLAN 0 to HW filter on device eth0 [ 631.694454][T29661] 8021q: adding VLAN 0 to HW filter on device eth1 [ 631.705309][T29661] 8021q: adding VLAN 0 to HW filter on device eth2 [ 631.716623][T29661] 8021q: adding VLAN 0 to HW filter on device eth3 [ 631.727538][T29661] ip6gre1: left allmulticast mode [ 631.766704][T26165] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.774740][T26165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.799935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.808569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.817131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.824109][T26165] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.826294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.832658][T26165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.855297][T26165] bridge0: port 3(veth1_to_bridge) entered blocking state [ 631.862623][T26165] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 631.971061][ T3332] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.985916][ T3332] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.018733][ T3332] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.052425][ T3332] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.102632][ T3332] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.143420][ T3332] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.173422][ T3332] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.192920][ T5627] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 632.202104][ T3332] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.259905][ T35] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 632.278481][ T35] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 632.287051][T25555] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 632.310977][ T35] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 632.319321][ T35] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 632.340104][ T5627] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 632.649862][ C1] net_ratelimit: 722 callbacks suppressed [ 632.649882][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.668211][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.680613][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.693083][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.705449][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.717886][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.730307][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.742748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.755183][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 632.767561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 633.809841][T26167] wlan1: Trigger new scan to find an IBSS to join [ 634.520610][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 634.540739][T29743] netlink: 'syz.4.10852': attribute type 19 has an invalid length. [ 634.557778][T29743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10852'. [ 634.593686][T29743] netlink: 'syz.4.10852': attribute type 19 has an invalid length. [ 634.622945][T29743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10852'. [ 635.689210][T29759] netlink: 'syz.0.10859': attribute type 20 has an invalid length. [ 635.698175][T29759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10859'. [ 636.211959][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 636.219754][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 637.659694][ C1] net_ratelimit: 9718 callbacks suppressed [ 637.659713][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.677958][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.690357][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.702808][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.715294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.727954][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.740358][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.752768][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.765113][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 637.777529][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 639.649549][ C1] sched: DL replenish lagged too much [ 641.590392][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 642.669622][ C1] net_ratelimit: 9113 callbacks suppressed [ 642.669654][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.687970][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.700416][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.712817][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.725322][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.737730][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.750114][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.762531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.775002][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 642.787517][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 644.152185][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 644.772180][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 646.062170][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 646.687517][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 647.679511][ C1] net_ratelimit: 8975 callbacks suppressed [ 647.679533][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.697901][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.710505][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.723046][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.735505][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.747954][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.760395][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.772909][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.785373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 647.797801][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 648.634855][T26163] wlan1: Trigger new scan to find an IBSS to join [ 649.907922][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.694938][ C1] net_ratelimit: 8945 callbacks suppressed [ 652.694959][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.713302][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.725697][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.738065][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.750551][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.762989][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.775392][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.787803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.800272][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 652.812714][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.699874][ C1] net_ratelimit: 8965 callbacks suppressed [ 657.699897][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.718194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.730649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.743180][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.755706][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.768241][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.780652][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.793067][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.805514][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 657.817968][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 660.142847][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 660.762016][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.406649][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 662.709536][ C1] net_ratelimit: 9269 callbacks suppressed [ 662.709558][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.727785][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.740169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.752648][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.765106][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.777496][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.789959][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.802437][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.814860][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 662.827264][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.719614][ C1] net_ratelimit: 9102 callbacks suppressed [ 667.719636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.737923][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.755747][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.768293][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.780701][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.793214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.805686][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.818161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.830726][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 667.843165][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 669.084688][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 671.543840][ C1] ================================================================== [ 671.552030][ C1] BUG: KASAN: slab-use-after-free in br_handle_frame+0xcfb/0x1510 [ 671.560016][ C1] Read of size 4 at addr ffff88807c476008 by task kworker/R-bat_e/3227 [ 671.568317][ C1] [ 671.570741][ C1] CPU: 1 UID: 0 PID: 3227 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 671.570779][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 671.570794][ C1] Workqueue: bat_events batadv_tt_purge [ 671.570895][ C1] Call Trace: [ 671.570932][ C1] [ 671.570963][ C1] dump_stack_lvl+0xe8/0x150 [ 671.571084][ C1] print_address_description+0x55/0x1e0 [ 671.571153][ C1] ? br_handle_frame+0xcfb/0x1510 [ 671.571201][ C1] print_report+0x58/0x70 [ 671.571230][ C1] kasan_report+0x117/0x150 [ 671.571295][ C1] ? br_handle_frame+0xcfb/0x1510 [ 671.571325][ C1] br_handle_frame+0xcfb/0x1510 [ 671.571356][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 671.571380][ C1] ? __lock_acquire+0x683/0x2cf0 [ 671.571441][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 671.571472][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 671.571497][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 671.571609][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 671.571653][ C1] ? process_backlog+0x3c3/0x1860 [ 671.571678][ C1] ? process_backlog+0x3c3/0x1860 [ 671.571698][ C1] ? process_backlog+0x3c3/0x1860 [ 671.571721][ C1] process_backlog+0x706/0x1860 [ 671.571744][ C1] ? process_backlog+0x3c3/0x1860 [ 671.571773][ C1] __napi_poll+0xaa/0x330 [ 671.571807][ C1] net_rx_action+0x61d/0xf50 [ 671.571835][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 671.571873][ C1] handle_softirqs+0x225/0x840 [ 671.571919][ C1] ? do_softirq+0x76/0xd0 [ 671.571948][ C1] ? batadv_tt_local_purge+0x2c1/0x340 [ 671.572009][ C1] do_softirq+0x76/0xd0 [ 671.572034][ C1] [ 671.572065][ C1] [ 671.572099][ C1] __local_bh_enable_ip+0xf8/0x130 [ 671.572127][ C1] batadv_tt_local_purge+0x2c1/0x340 [ 671.572168][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 671.572194][ C1] batadv_tt_purge+0x35/0xa10 [ 671.572217][ C1] ? rcu_is_watching+0x15/0xb0 [ 671.572252][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 671.572277][ C1] process_scheduled_works+0xa8e/0x14e0 [ 671.572321][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 671.572346][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 671.572377][ C1] ? assign_work+0x3af/0x5d0 [ 671.572411][ C1] rescuer_thread+0x7b6/0x10b0 [ 671.572444][ C1] ? rescuer_thread+0xb8/0x10b0 [ 671.572496][ C1] kthread+0x388/0x470 [ 671.572526][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 671.572553][ C1] ? __pfx_kthread+0x10/0x10 [ 671.572585][ C1] ret_from_fork+0x514/0xb70 [ 671.572635][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 671.572666][ C1] ? __switch_to+0xc89/0x1420 [ 671.572695][ C1] ? __pfx_kthread+0x10/0x10 [ 671.572727][ C1] ret_from_fork_asm+0x1a/0x30 [ 671.572757][ C1] [ 671.572765][ C1] [ 671.840371][ C1] Allocated by task 5627: [ 671.844829][ C1] kasan_save_track+0x3e/0x80 [ 671.849554][ C1] __kasan_kmalloc+0x93/0xb0 [ 671.854191][ C1] __kmalloc_node_track_caller_noprof+0x4c3/0x730 [ 671.860659][ C1] __alloc_skb+0x2bd/0x7a0 [ 671.865154][ C1] mld_newpack+0x165/0xcb0 [ 671.869672][ C1] add_grec+0x119f/0x19d0 [ 671.874045][ C1] mld_ifc_work+0x30e/0xd60 [ 671.878576][ C1] process_scheduled_works+0xa8e/0x14e0 [ 671.884168][ C1] worker_thread+0xa47/0xfb0 [ 671.888789][ C1] kthread+0x388/0x470 [ 671.892901][ C1] ret_from_fork+0x514/0xb70 [ 671.897529][ C1] ret_from_fork_asm+0x1a/0x30 [ 671.902317][ C1] [ 671.904662][ C1] Freed by task 3227: [ 671.908657][ C1] kasan_save_track+0x3e/0x80 [ 671.913380][ C1] kasan_save_free_info+0x40/0x50 [ 671.918479][ C1] __kasan_slab_free+0x5c/0x80 [ 671.923282][ C1] kfree+0x1c5/0x640 [ 671.927247][ C1] pskb_expand_head+0x469/0x13a0 [ 671.932245][ C1] do_xdp_generic+0x9a5/0x12d0 [ 671.937045][ C1] __netif_receive_skb_core+0x10e0/0x30b0 [ 671.942802][ C1] netif_receive_skb+0x1fe/0xbf0 [ 671.947774][ C1] NF_HOOK+0xa4/0x3a0 [ 671.951783][ C1] br_handle_frame_finish+0x1192/0x1990 [ 671.957401][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 671.962438][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 671.968453][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 671.973852][ C1] br_handle_frame+0x127f/0x1510 [ 671.978830][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 671.984507][ C1] process_backlog+0x706/0x1860 [ 671.989402][ C1] __napi_poll+0xaa/0x330 [ 671.993768][ C1] net_rx_action+0x61d/0xf50 [ 671.998373][ C1] handle_softirqs+0x225/0x840 [ 672.003177][ C1] do_softirq+0x76/0xd0 [ 672.007356][ C1] __local_bh_enable_ip+0xf8/0x130 [ 672.012506][ C1] batadv_tt_local_purge+0x2c1/0x340 [ 672.017833][ C1] batadv_tt_purge+0x35/0xa10 [ 672.022543][ C1] process_scheduled_works+0xa8e/0x14e0 [ 672.028149][ C1] rescuer_thread+0x7b6/0x10b0 [ 672.032942][ C1] kthread+0x388/0x470 [ 672.037043][ C1] ret_from_fork+0x514/0xb70 [ 672.041668][ C1] ret_from_fork_asm+0x1a/0x30 [ 672.046461][ C1] [ 672.048808][ C1] The buggy address belongs to the object at ffff88807c476000 [ 672.048808][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 672.062889][ C1] The buggy address is located 8 bytes inside of [ 672.062889][ C1] freed 2048-byte region [ffff88807c476000, ffff88807c476800) [ 672.076630][ C1] [ 672.078999][ C1] The buggy address belongs to the physical page: [ 672.085465][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c472000 pfn:0x7c470 [ 672.095576][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 672.104100][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 672.112631][ C1] page_type: f5(slab) [ 672.116648][ C1] raw: 00fff00000000240 ffff88801b005000 ffffea0001f06210 ffffea00013ad810 [ 672.125261][ C1] raw: ffff88807c472000 0000000800080001 00000000f5000000 0000000000000000 [ 672.133880][ C1] head: 00fff00000000240 ffff88801b005000 ffffea0001f06210 ffffea00013ad810 [ 672.142594][ C1] head: ffff88807c472000 0000000800080001 00000000f5000000 0000000000000000 [ 672.151297][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 672.160005][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 672.168694][ C1] page dumped because: kasan: bad access detected [ 672.175222][ C1] page_owner tracks the page as allocated [ 672.180952][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 29164, tgid 29161 (syz.4.10629), ts 619315175671, free_ts 619310279727 [ 672.202609][ C1] post_alloc_hook+0x1f9/0x250 [ 672.207441][ C1] get_page_from_freelist+0x21fa/0x2270 [ 672.213018][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 672.218851][ C1] allocate_slab+0x79/0x5e0 [ 672.223382][ C1] refill_objects+0x2d5/0x350 [ 672.228081][ C1] __pcs_replace_empty_main+0x2bf/0x6b0 [ 672.233667][ C1] __kmalloc_node_track_caller_noprof+0x557/0x730 [ 672.240119][ C1] __alloc_skb+0x2bd/0x7a0 [ 672.244573][ C1] alloc_skb_with_frags+0xc6/0x760 [ 672.249787][ C1] sock_alloc_send_pskb+0x878/0x990 [ 672.255059][ C1] llc_ui_sendmsg+0x459/0xe30 [ 672.259814][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 672.264895][ C1] sock_sendmsg+0x1ca/0x2d0 [ 672.269472][ C1] splice_to_socket+0xb5e/0x12a0 [ 672.274471][ C1] direct_splice_actor+0x101/0x160 [ 672.279611][ C1] splice_direct_to_actor+0x57b/0xcb0 [ 672.285028][ C1] page last free pid 29163 tgid 29158 stack trace: [ 672.291545][ C1] __free_frozen_pages+0xc1e/0xd10 [ 672.296692][ C1] rcu_core+0x78b/0x10a0 [ 672.300971][ C1] handle_softirqs+0x225/0x840 [ 672.305757][ C1] __irq_exit_rcu+0xca/0x220 [ 672.310368][ C1] irq_exit_rcu+0x9/0x30 [ 672.314637][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 672.320410][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 672.326475][ C1] [ 672.328818][ C1] Memory state around the buggy address: [ 672.334474][ C1] ffff88807c475f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 672.342561][ C1] ffff88807c475f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 672.350648][ C1] >ffff88807c476000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 672.358749][ C1] ^ [ 672.363100][ C1] ffff88807c476080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 672.371204][ C1] ffff88807c476100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 672.379296][ C1] ================================================================== [ 672.387470][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 672.394707][ C1] CPU: 1 UID: 0 PID: 3227 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 672.404457][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 672.414629][ C1] Workqueue: bat_events batadv_tt_purge [ 672.420303][ C1] Call Trace: [ 672.423599][ C1] [ 672.426471][ C1] vpanic+0x56c/0xa60 [ 672.430500][ C1] ? rcu_is_watching+0x15/0xb0 [ 672.435289][ C1] ? __pfx_vpanic+0x10/0x10 [ 672.439872][ C1] panic+0xc5/0xd0 [ 672.443650][ C1] ? __pfx_panic+0x10/0x10 [ 672.448109][ C1] ? br_handle_frame+0xcfb/0x1510 [ 672.453168][ C1] ? br_handle_frame+0xcfb/0x1510 [ 672.458328][ C1] check_panic_on_warn+0x89/0xb0 [ 672.463312][ C1] ? br_handle_frame+0xcfb/0x1510 [ 672.468391][ C1] end_report+0x73/0x170 [ 672.472677][ C1] ? br_handle_frame+0xcfb/0x1510 [ 672.477740][ C1] kasan_report+0x128/0x150 [ 672.482284][ C1] ? br_handle_frame+0xcfb/0x1510 [ 672.487362][ C1] br_handle_frame+0xcfb/0x1510 [ 672.492255][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 672.497573][ C1] ? __lock_acquire+0x683/0x2cf0 [ 672.502551][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 672.508504][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 672.513819][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 672.519497][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 672.525611][ C1] ? process_backlog+0x3c3/0x1860 [ 672.530682][ C1] ? process_backlog+0x3c3/0x1860 [ 672.535723][ C1] ? process_backlog+0x3c3/0x1860 [ 672.540775][ C1] process_backlog+0x706/0x1860 [ 672.545661][ C1] ? process_backlog+0x3c3/0x1860 [ 672.550723][ C1] __napi_poll+0xaa/0x330 [ 672.555093][ C1] net_rx_action+0x61d/0xf50 [ 672.559711][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 672.564877][ C1] handle_softirqs+0x225/0x840 [ 672.569681][ C1] ? do_softirq+0x76/0xd0 [ 672.574042][ C1] ? batadv_tt_local_purge+0x2c1/0x340 [ 672.579537][ C1] do_softirq+0x76/0xd0 [ 672.583724][ C1] [ 672.586678][ C1] [ 672.589628][ C1] __local_bh_enable_ip+0xf8/0x130 [ 672.594771][ C1] batadv_tt_local_purge+0x2c1/0x340 [ 672.600114][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 672.605864][ C1] batadv_tt_purge+0x35/0xa10 [ 672.610586][ C1] ? rcu_is_watching+0x15/0xb0 [ 672.615390][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 672.621144][ C1] process_scheduled_works+0xa8e/0x14e0 [ 672.626741][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 672.632765][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 672.637832][ C1] ? assign_work+0x3af/0x5d0 [ 672.642461][ C1] rescuer_thread+0x7b6/0x10b0 [ 672.647270][ C1] ? rescuer_thread+0xb8/0x10b0 [ 672.652189][ C1] kthread+0x388/0x470 [ 672.656298][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 672.661548][ C1] ? __pfx_kthread+0x10/0x10 [ 672.666181][ C1] ret_from_fork+0x514/0xb70 [ 672.670813][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 672.675968][ C1] ? __switch_to+0xc89/0x1420 [ 672.680684][ C1] ? __pfx_kthread+0x10/0x10 [ 672.685321][ C1] ret_from_fork_asm+0x1a/0x30 [ 672.690125][ C1] [ 672.693805][ C1] Kernel Offset: disabled [ 672.698140][ C1] Rebooting in 86400 seconds..