last executing test programs: 2.499980509s ago: executing program 2 (id=10782): r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000580)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) listen(r0, 0x89) 2.45936278s ago: executing program 3 (id=10783): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.445970694s ago: executing program 4 (id=10784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 2.338233356s ago: executing program 1 (id=10786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) close(0x3) 2.30730752s ago: executing program 4 (id=10787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 2.105762506s ago: executing program 0 (id=10788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.798184048s ago: executing program 3 (id=10789): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a0000020050005000000b0100000b01601003e80000000001010101", 0x2e}], 0x1, 0x0, 0x0) 1.778798759s ago: executing program 1 (id=10790): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.769929309s ago: executing program 4 (id=10791): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB="1800000000000000100100000100000012000000000000001000000000000000100100000e"], 0x28}, 0x0) listen(r0, 0x0) recvmsg(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x40002000) 1.665430015s ago: executing program 1 (id=10792): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.640529912s ago: executing program 0 (id=10793): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.594136367s ago: executing program 4 (id=10794): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 1.49516111s ago: executing program 2 (id=10795): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd61"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.460276742s ago: executing program 1 (id=10796): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x82000001, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 1.341524619s ago: executing program 3 (id=10797): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, &(0x7f0000000080)) 1.187276359s ago: executing program 1 (id=10798): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x22180, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) 1.136134635s ago: executing program 2 (id=10799): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x30}}, 0x0) 1.130327043s ago: executing program 0 (id=10800): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='A', 0x1}], 0x1}}], 0x1, 0x0) 1.011057252s ago: executing program 3 (id=10801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.006246534s ago: executing program 0 (id=10802): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {0x1, 0xf0, 0x1}}, 0x18) sendmmsg(r0, 0x0, 0x0, 0x20040891) 853.603873ms ago: executing program 2 (id=10803): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 846.141248ms ago: executing program 1 (id=10804): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd9, 0x6, @broadcast}, 0x14) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) socket$inet(0x2, 0x802, 0x1) 682.846491ms ago: executing program 3 (id=10805): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x400, 0x4, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "860c426fc93dabc6"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0080000001"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) 536.613965ms ago: executing program 2 (id=10806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp', 0x4) shutdown(r0, 0x1) 500.746787ms ago: executing program 0 (id=10807): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/66, 0x42}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 372.284356ms ago: executing program 0 (id=10808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x5c}}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xf0, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 347.847575ms ago: executing program 4 (id=10809): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r0, 0x0, r3, 0x0, 0x1000, 0x0) 195.547312ms ago: executing program 3 (id=10810): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) 101.257105ms ago: executing program 2 (id=10811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002280)=[{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000440)="b388c65db98cb7156037a023b2cf613cd13f7fe6a9b61c92d653c5408968284ca1", 0x21}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40000141, 0x0) 0s ago: executing program 4 (id=10812): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x1c, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @empty}, "b96ee10c4a0a4f91"}}}}}, 0x2e) kernel console output (not intermixed with test programs): not supported in mode balance-xor(2) [ 260.696418][T15737] bond2 (unregistering): Released all slaves [ 260.911093][T15751] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4803'. [ 260.911119][T15751] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4803'. [ 261.247134][T15763] veth1_macvtap: left promiscuous mode [ 261.247313][T15763] macsec0: entered promiscuous mode [ 261.429580][T15765] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 261.452688][T15765] bond2 (unregistering): Released all slaves [ 261.470492][T15770] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 262.235336][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4827'. [ 262.370067][T15804] netlink: 'syz.2.4825': attribute type 3 has an invalid length. [ 263.476227][T15848] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 263.981641][T15868] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4861'. [ 264.140963][T15874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4864'. [ 264.488201][T15889] netlink: zone id is out of range [ 264.488217][T15889] netlink: set zone limit has 4 unknown bytes [ 264.630936][T15891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4873'. [ 264.631016][T15891] bridge_slave_1: left allmulticast mode [ 264.631337][T15891] bridge_slave_1: left promiscuous mode [ 264.632150][T15891] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.697596][T15891] bridge_slave_0: left allmulticast mode [ 264.697900][T15891] bridge_slave_0: left promiscuous mode [ 264.698724][T15891] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.473327][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4887'. [ 265.683538][T15928] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4890'. [ 265.683563][T15928] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4890'. [ 266.056156][T15942] openvswitch: netlink: Multiple metadata blocks provided [ 266.621084][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4908'. [ 267.159167][T15985] netlink: 'syz.2.4919': attribute type 7 has an invalid length. [ 267.159188][T15985] netlink: 'syz.2.4919': attribute type 8 has an invalid length. [ 267.476089][T15998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.633680][T16000] xt_nat: multiple ranges no longer supported [ 268.027622][T16014] ip6t_hbh: unknown flags 38 [ 268.818381][T16034] bond2 (unregistering): Released all slaves [ 269.070809][T16053] openvswitch: netlink: Flow key attribute not present in set flow. [ 269.998732][T16093] netlink: 'syz.3.4972': attribute type 3 has an invalid length. [ 270.335076][T16107] netlink: 'syz.1.4979': attribute type 1 has an invalid length. [ 270.335099][T16107] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4979'. [ 270.335114][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4979'. [ 270.529072][T16113] netlink: 'syz.2.4984': attribute type 1 has an invalid length. [ 270.529094][T16113] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4984'. [ 270.529346][T16112] netlink: 'syz.4.4980': attribute type 6 has an invalid length. [ 270.691209][T16120] openvswitch: netlink: IP tunnel TTL not specified. [ 270.904423][T16129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.113277][T16137] ipt_rpfilter: unknown options [ 271.178252][T16142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4998'. [ 271.235581][T16145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5000'. [ 271.363773][T16152] IPVS: length: 239 != 24 [ 272.381396][T16182] netlink: 'syz.0.5016': attribute type 21 has an invalid length. [ 272.381419][T16182] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5016'. [ 272.381466][T16182] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5016'. [ 272.557165][T16189] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 272.599853][T16191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5020'. [ 273.143683][T16212] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5032'. [ 273.157455][T16214] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 273.432034][T16223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5037'. [ 273.432064][T16223] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 274.085646][T16248] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 274.354081][T16258] netlink: 'syz.4.5054': attribute type 97 has an invalid length. [ 274.354103][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5054'. [ 274.354118][T16258] netlink: 'syz.4.5054': attribute type 97 has an invalid length. [ 274.354131][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5054'. [ 275.255812][T16296] Cannot find del_set index 4 as target [ 275.919001][T16320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 276.725022][T16357] netlink: 'syz.2.5103': attribute type 64 has an invalid length. [ 277.423212][T16376] __nla_validate_parse: 1 callbacks suppressed [ 277.423233][T16376] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5112'. [ 277.793154][T16386] netlink: 'syz.2.5117': attribute type 29 has an invalid length. [ 277.875248][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.875293][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.875325][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.875357][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.884770][T16390] netlink: 'syz.4.5120': attribute type 2 has an invalid length. [ 277.884790][T16390] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5120'. [ 277.921276][T16394] netlink: 'syz.3.5119': attribute type 8 has an invalid length. [ 278.113759][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5126'. [ 278.113782][T16400] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5126'. [ 278.216447][T16405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5127'. [ 278.397997][T16414] Cannot find del_set index 3 as target [ 279.473786][T16459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5153'. [ 279.510921][T16463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5155'. [ 280.298009][T16496] xt_ecn: cannot match TCP bits for non-tcp packets [ 280.795469][T16514] Bluetooth: MGMT ver 1.23 [ 280.796594][T16514] Bluetooth: hci0: unsupported parameter 5135 [ 280.796612][T16514] Bluetooth: hci0: unsupported parameter 8192 [ 280.796628][T16514] Bluetooth: hci0: unsupported parameter 5135 [ 280.796640][T16514] Bluetooth: hci0: unsupported parameter 8192 [ 281.116154][T16522] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5183'. [ 281.116184][T16522] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5183'. [ 281.398039][T16532] xt_MASQUERADE: bad MAP_IPS. [ 281.470634][T16535] netlink: 'syz.1.5190': attribute type 2 has an invalid length. [ 281.604801][T16535] : entered promiscuous mode [ 281.730994][T16548] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 281.835935][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5201'. [ 281.836257][T16552] xt_cgroup: path and classid specified [ 282.391866][T16573] Zero length message leads to an empty skb [ 284.665272][T16675] __nla_validate_parse: 1 callbacks suppressed [ 284.665291][T16675] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5258'. [ 284.777905][T16679] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5261'. [ 285.588724][T16714] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5276'. [ 286.070889][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5286'. [ 287.099139][T16770] netlink: 'syz.2.5304': attribute type 1 has an invalid length. [ 287.099162][T16770] netlink: 232 bytes leftover after parsing attributes in process `syz.2.5304'. [ 287.099176][T16770] netlink: 'syz.2.5304': attribute type 1 has an invalid length. [ 287.446190][T16787] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5311'. [ 287.983191][T16809] netlink: 'syz.4.5323': attribute type 11 has an invalid length. [ 288.012200][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5321'. [ 288.115662][T16816] xt_HMARK: spi-set and port-set can't be combined [ 288.455633][T16829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.810660][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5339'. [ 290.967722][T16917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.687357][T16945] tipc: Started in network mode [ 291.687403][T16945] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 292.700923][T16987] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5407'. [ 292.827792][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5411'. [ 293.321697][T17014] netlink: 'syz.2.5419': attribute type 62 has an invalid length. [ 294.157184][T17050] xt_hashlimit: size too large, truncated to 1048576 [ 294.735780][T17072] smc: net device team0 applied user defined pnetid SYZ2 [ 295.201777][T17093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5453'. [ 295.779822][T17112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5462'. [ 296.801072][T17157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5484'. [ 296.801099][T17157] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5484'. [ 296.801114][T17157] netlink: 'syz.0.5484': attribute type 6 has an invalid length. [ 296.801127][T17157] netlink: 'syz.0.5484': attribute type 5 has an invalid length. [ 296.801138][T17157] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5484'. [ 297.350498][T17176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5494'. [ 298.525739][T17219] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5513'. [ 298.830874][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5519'. [ 298.922585][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5520'. [ 298.962209][T17241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5522'. [ 298.998207][T17241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5522'. [ 299.117913][T17238] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 299.137121][T17238] bond4 (unregistering): Released all slaves [ 300.016069][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5542'. [ 300.409499][T17298] netlink: 'syz.2.5550': attribute type 33 has an invalid length. [ 300.591371][T17306] netlink: 'syz.3.5553': attribute type 49 has an invalid length. [ 300.906096][T17318] vlan2: entered promiscuous mode [ 300.906117][T17318] bridge0: entered promiscuous mode [ 301.255172][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5566'. [ 301.255194][T17331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5566'. [ 301.255210][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5566'. [ 301.784296][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5575'. [ 301.817526][T17349] vlan2: entered promiscuous mode [ 301.817549][T17349] gretap0: entered promiscuous mode [ 301.833149][T17351] netlink: 'syz.4.5576': attribute type 1 has an invalid length. [ 302.233938][T17361] IPVS: Unknown mcast interface: macvlan0 [ 302.258640][T17359] netlink: 'syz.4.5581': attribute type 3 has an invalid length. [ 302.315317][T17365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.165516][T17430] __nla_validate_parse: 3 callbacks suppressed [ 304.165536][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5614'. [ 304.862902][T17457] netlink: 'syz.1.5625': attribute type 1 has an invalid length. [ 304.862937][T17457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.542269][T17484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5638'. [ 305.542327][T17484] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 305.745095][T17488] Bluetooth: hci0: unsupported parameter 5161 [ 305.745119][T17488] Bluetooth: hci0: unsupported parameter 8192 [ 305.745132][T17488] Bluetooth: hci0: unsupported parameter 5161 [ 305.745144][T17488] Bluetooth: hci0: unsupported parameter 8192 [ 306.306849][T17506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5648'. [ 309.241333][T17602] netlink: 'syz.0.5694': attribute type 178 has an invalid length. [ 309.633277][T17618] atomic_op ffff88802b7661e0 conn xmit_atomic 0000000000000000 [ 309.897043][T17628] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5705'. [ 310.404919][T17650] netlink: 'syz.2.5715': attribute type 46 has an invalid length. [ 310.823856][T17664] openvswitch: netlink: Missing key (keys=40, expected=100) [ 310.840084][T17668] tipc: Enabling of bearer rejected, failed to enable media [ 311.270399][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5732'. [ 311.778999][T17699] veth9: entered allmulticast mode [ 312.039615][T17715] netlink: 'syz.1.5748': attribute type 2 has an invalid length. [ 312.039636][T17715] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5748'. [ 312.357801][T17721] bond4: (slave bond_slave_0): Device is not our slave [ 312.357825][T17721] bond4: option active_slave: invalid value (bond_slave_0) [ 312.391738][T17721] bond4 (unregistering): Released all slaves [ 312.519939][T17734] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.578027][T17736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5759'. [ 312.658865][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5761'. [ 312.806604][T17747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5758'. [ 312.806628][T17747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5758'. [ 313.744754][T17777] pim6reg: entered allmulticast mode [ 313.771975][T17777] pim6reg: left allmulticast mode [ 313.913512][T17784] netlink: 'syz.4.5777': attribute type 13 has an invalid length. [ 314.070616][T17786] openvswitch: netlink: Missing key (keys=40, expected=100) [ 315.038563][T17813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5793'. [ 315.999635][T17845] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5808'. [ 316.264454][T17853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5811'. [ 316.310069][T17828] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 316.425358][T17859] nftables ruleset with unbound set [ 316.442550][T17857] tipc: Started in network mode [ 316.442584][T17857] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 316.449351][T17857] tipc: Enabled bearer , priority 10 [ 317.118138][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.556298][T17907] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5839'. [ 317.556325][T17907] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5839'. [ 317.556340][T17907] netlink: 'syz.1.5839': attribute type 5 has an invalid length. [ 317.556352][T17907] netlink: 43 bytes leftover after parsing attributes in process `syz.1.5839'. [ 317.580004][ T5798] tipc: Node number set to 4269801488 [ 317.811762][T17916] Cannot find add_set index 46338 as target [ 317.923836][T17923] netlink: 'syz.2.5847': attribute type 7 has an invalid length. [ 317.923857][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5847'. [ 317.923885][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5847'. [ 318.207140][T17935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5851'. [ 318.729091][T17958] netlink: 'syz.2.5863': attribute type 4 has an invalid length. [ 319.003813][T17969] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 319.095862][ T12] IPVS: starting estimator thread 0... [ 319.857970][T17976] IPVS: using max 32 ests per chain, 76800 per kthread [ 320.286955][T18002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5884'. [ 320.623706][T18018] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 321.181050][T18040] Bluetooth: MGMT ver 1.23 [ 321.421498][T18049] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5908'. [ 321.522095][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5909'. [ 321.571177][ T1014] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.571453][ T1014] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.594172][ T5798] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 321.928086][T18067] netlink: 'syz.2.5917': attribute type 3 has an invalid length. [ 321.928106][T18067] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5917'. [ 322.074623][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 322.204293][T18076] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5921'. [ 322.309977][T18078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5922'. [ 322.636992][ T57] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 323.464034][T18122] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5942'. [ 323.943697][T18141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5952'. [ 324.447002][T18161] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.447101][T18161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5963'. [ 324.784733][T18173] netlink: 'syz.3.5968': attribute type 58 has an invalid length. [ 324.784753][T18173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5968'. [ 324.814005][T18174] Bluetooth: hci0: unsupported parameter 5135 [ 324.814025][T18174] Bluetooth: hci0: unsupported parameter 8192 [ 324.814038][T18174] Bluetooth: hci0: unsupported parameter 5135 [ 324.814049][T18174] Bluetooth: hci0: unsupported parameter 8192 [ 325.349422][T18194] netlink: 'syz.4.5979': attribute type 1 has an invalid length. [ 325.485962][T18200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5982'. [ 325.491460][T18196] bridge0: port 3(ipvlan3) entered blocking state [ 325.491597][T18196] bridge0: port 3(ipvlan3) entered disabled state [ 325.491749][T18196] ipvlan3: entered allmulticast mode [ 325.491764][T18196] bridge0: entered allmulticast mode [ 325.511151][T18196] ipvlan3: left allmulticast mode [ 325.512334][T18196] bridge0: left allmulticast mode [ 325.592637][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 326.021988][T18216] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 326.172390][T18224] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5994'. [ 326.188145][T18222] netlink: 'syz.1.5993': attribute type 1 has an invalid length. [ 326.188166][T18222] netlink: 500 bytes leftover after parsing attributes in process `syz.1.5993'. [ 326.649031][T18242] Bluetooth: hci0: unsupported parameter 5161 [ 326.649064][T18242] Bluetooth: hci0: unsupported parameter 8192 [ 326.649078][T18242] Bluetooth: hci0: unsupported parameter 5161 [ 326.649091][T18242] Bluetooth: hci0: unsupported parameter 8192 [ 326.838744][T18246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.186239][T18259] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6012'. [ 327.244130][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6015'. [ 327.476345][T18268] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6017'. [ 327.476370][T18268] nbd: illegal input index 65508 [ 327.758469][T18279] Bluetooth: hci0: invalid length 0, exp 1 for type 31 [ 327.979409][T18273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.979446][T18273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.979474][T18273] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 328.406490][T18273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.406528][T18273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.406554][T18273] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 328.617784][T18273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.617822][T18273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.617849][T18273] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 328.721375][T18301] Bluetooth: hci0: unsupported parameter 5135 [ 328.721400][T18301] Bluetooth: hci0: unsupported parameter 8192 [ 328.721413][T18301] Bluetooth: hci0: unsupported parameter 5135 [ 328.721425][T18301] Bluetooth: hci0: unsupported parameter 8192 [ 328.893794][T18273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.893831][T18273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.893857][T18273] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 328.923973][T18303] Bluetooth: MGMT ver 1.23 [ 328.978745][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 329.002984][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 329.003264][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 329.003458][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 329.284494][ T1014] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.284529][ T1014] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 329.284553][ T1014] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.432897][ T49] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.432931][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 329.432955][ T49] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.481133][ T49] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.481166][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 329.481191][ T49] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.553880][ T49] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.553915][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 329.553939][ T49] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 329.830798][T18330] xt_l2tp: v2 sid > 0xffff: 1114112 [ 330.168523][T18343] block nbd0: Unsupported socket: should be TCP or UNIX. [ 330.697635][T18363] IPVS: stopping backup sync thread 15106 ... [ 331.180183][T18383] netlink: 'syz.0.6072': attribute type 3 has an invalid length. [ 331.180205][T18383] netlink: 'syz.0.6072': attribute type 1 has an invalid length. [ 331.180217][T18383] __nla_validate_parse: 50 callbacks suppressed [ 331.180229][T18383] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6072'. [ 331.934243][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6086'. [ 333.280374][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6108'. [ 333.409819][T18461] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6110'. [ 333.752956][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.817727][T18476] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6117'. [ 334.005401][T18485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6120'. [ 334.177331][T18493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6127'. [ 334.554865][T18508] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6133'. [ 334.554923][T18508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6133'. [ 334.554937][T18508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6133'. [ 337.324836][T18598] smc: removing net device team0 with user defined pnetid SYZ2 [ 337.346830][T18598] team0 (unregistering): Port device team_slave_0 removed [ 337.377147][T18598] team0 (unregistering): Port device team_slave_1 removed [ 337.407728][T18598] team0 (unregistering): Port device vlan0 removed [ 337.988929][T18629] netlink: 'syz.4.6187': attribute type 1 has an invalid length. [ 338.182111][T18637] nbd: must specify an index to disconnect [ 338.606342][T18651] __nla_validate_parse: 1 callbacks suppressed [ 338.606362][T18651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6198'. [ 339.463912][T18682] netlink: 176 bytes leftover after parsing attributes in process `syz.1.6211'. [ 339.463935][T18682] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6211'. [ 342.094018][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6257'. [ 342.496552][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6266'. [ 342.605945][T18802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6268'. [ 342.874204][T18810] netlink: 'syz.4.6273': attribute type 5 has an invalid length. [ 342.874241][T18810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6273'. [ 342.976906][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6277'. [ 343.152739][T18822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6280'. [ 343.264243][T18825] netlink: 'syz.0.6281': attribute type 1 has an invalid length. [ 343.699254][T18845] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6290'. [ 344.147131][T18863] netlink: NAT attribute has 4 unknown bytes [ 344.147166][T18863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.202200][T18864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6300'. [ 344.202240][T18864] netlink: 'syz.3.6300': attribute type 1 has an invalid length. [ 344.234129][T18870] netlink: 'syz.2.6304': attribute type 2 has an invalid length. [ 344.530887][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6309'. [ 344.530919][T18882] netlink: 'syz.3.6309': attribute type 3 has an invalid length. [ 345.749794][T18929] tipc: Enabled bearer , priority 10 [ 346.742686][ T57] tipc: Node number set to 2035774871 [ 347.631303][T18985] Bluetooth: hci0: unsupported parameter 5135 [ 347.631326][T18985] Bluetooth: hci0: unsupported parameter 8192 [ 347.631340][T18985] Bluetooth: hci0: unsupported parameter 5135 [ 347.631352][T18985] Bluetooth: hci0: unsupported parameter 8192 [ 348.256688][T19008] tipc: Enabling of bearer rejected, already enabled [ 349.112584][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.321935][T19050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6389'. [ 349.616867][T19057] sock: sock_timestamping_bind_phc: sock not bind to device [ 349.957890][T19070] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 350.301020][T19082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6405'. [ 350.301055][T19082] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 351.453795][T19128] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6425'. [ 351.453818][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6425'. [ 351.453837][T19128] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6425'. [ 351.453850][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6425'. [ 351.453864][T19128] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6425'. [ 351.872718][T19141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.043653][T19189] Bluetooth: MGMT ver 1.23 [ 353.136786][T19194] openvswitch: netlink: Missing key (keys=40, expected=100) [ 353.768548][T19210] tipc: Started in network mode [ 353.768638][T19210] tipc: Node identity e0000001, cluster identity 4711 [ 353.768694][T19210] tipc: Enabling of bearer rejected, failed to enable media [ 354.507465][T19247] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.161996][T19271] netlink: 288 bytes leftover after parsing attributes in process `syz.0.6496'. [ 355.598786][T19285] netlink: 199784 bytes leftover after parsing attributes in process `syz.1.6502'. [ 355.598811][T19285] netlink: 'syz.1.6502': attribute type 1 has an invalid length. [ 355.999753][T19303] Bluetooth: hci0: unsupported parameter 5135 [ 355.999785][T19303] Bluetooth: hci0: unsupported parameter 8192 [ 355.999799][T19303] Bluetooth: hci0: unsupported parameter 5135 [ 355.999811][T19303] Bluetooth: hci0: unsupported parameter 8192 [ 356.399487][T19318] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 357.078790][T19343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6530'. [ 357.129844][T19346] netlink: 'syz.4.6532': attribute type 6 has an invalid length. [ 357.129866][T19346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6532'. [ 357.252920][T19350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6534'. [ 358.120172][T19381] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6548'. [ 358.607288][T19404] vlan1: entered allmulticast mode [ 358.607311][T19404] veth0_vlan: entered allmulticast mode [ 358.625275][T19403] Bluetooth: hci0: unsupported parameter 5134 [ 358.625295][T19403] Bluetooth: hci0: unsupported parameter 8192 [ 358.625308][T19403] Bluetooth: hci0: unsupported parameter 5134 [ 358.625320][T19403] Bluetooth: hci0: unsupported parameter 8192 [ 358.751675][T19410] netlink: 'syz.1.6561': attribute type 1 has an invalid length. [ 358.751696][T19410] nbd: error processing sock list [ 359.048330][T19420] tipc: Enabling of bearer rejected, media not registered [ 359.554462][T19436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6575'. [ 360.039405][T19455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6582'. [ 360.635475][T19476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6594'. [ 360.892181][T19487] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 360.990658][T19492] netlink: 'syz.0.6600': attribute type 29 has an invalid length. [ 360.991376][T19492] netlink: 'syz.0.6600': attribute type 29 has an invalid length. [ 361.321917][T19504] tipc: Enabling of bearer rejected, failed to enable media [ 361.670486][T19523] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 362.250421][T19548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.250440][T19548] IPv6: NLM_F_CREATE should be set when creating new route [ 362.923224][T19565] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.224657][T19579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6640'. [ 363.224697][T19579] bridge: RTM_NEWNEIGH with invalid ether address [ 364.247781][T19611] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6656'. [ 364.499528][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6663'. [ 364.501729][ T987] lo speed is unknown, defaulting to 1000 [ 364.516014][T19623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6663'. [ 364.837109][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6671'. [ 364.837134][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6671'. [ 364.837159][T19640] netlink: 'syz.3.6671': attribute type 12 has an invalid length. [ 364.837173][T19640] netlink: 'syz.3.6671': attribute type 11 has an invalid length. [ 365.757062][T19677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6688'. [ 366.265739][T19696] netlink: 'syz.3.6696': attribute type 1 has an invalid length. [ 366.265761][T19696] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.6696'. [ 366.629791][T19712] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6703'. [ 367.118137][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6710'. [ 368.003000][T19766] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 368.003036][T19766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.044378][T19767] netlink: 'syz.3.6726': attribute type 3 has an invalid length. [ 368.924616][T19803] netlink: 'syz.4.6742': attribute type 1 has an invalid length. [ 368.924636][T19803] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6742'. [ 368.924650][T19803] netlink: 'syz.4.6742': attribute type 1 has an invalid length. [ 371.597486][T19889] vlan3: entered promiscuous mode [ 371.597515][T19889] geneve1: entered promiscuous mode [ 371.597819][T19889] vlan3: entered allmulticast mode [ 371.597835][T19889] geneve1: entered allmulticast mode [ 372.288795][T19921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6801'. [ 372.644132][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6807'. [ 373.043171][T19952] netlink: 332 bytes leftover after parsing attributes in process `syz.3.6816'. [ 373.279846][T19962] tipc: Started in network mode [ 373.279865][T19962] tipc: Node identity , cluster identity 4711 [ 373.279878][T19962] tipc: Failed to set node id, please configure manually [ 373.279920][T19962] tipc: Enabling of bearer rejected, failed to enable media [ 373.311031][T19964] xt_l2tp: wrong L2TP version: 0 [ 373.720445][T19979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6826'. [ 373.912825][T19981] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6830'. [ 374.547111][T20008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6843'. [ 377.053907][T20092] netlink: 'syz.4.6881': attribute type 83 has an invalid length. [ 377.348563][T20101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.556235][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.646382][T20156] netlink: 'syz.1.6913': attribute type 25 has an invalid length. [ 378.856882][T20164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6915'. [ 378.856919][T20164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6915'. [ 379.232245][T20179] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6925'. [ 380.483080][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.623275][T20219] ovs-s: entered promiscuous mode [ 380.644334][T20221] openvswitch: ovs-s: Dropping previously announced user features [ 380.718331][T20225] netlink: 'syz.2.6949': attribute type 1 has an invalid length. [ 380.718354][T20225] netlink: 'syz.2.6949': attribute type 3 has an invalid length. [ 380.718367][T20225] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6949'. [ 380.718470][T20225] NCSI netlink: No device for ifindex 813332851 [ 381.982058][T20270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.183979][T20276] openvswitch: netlink: Missing key (keys=40, expected=100) [ 382.250542][T20280] netlink: 'syz.3.6974': attribute type 1 has an invalid length. [ 382.272654][T20282] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 382.590693][T20294] xt_IDLETIMER: label is empty or not nul-terminated [ 383.106501][T20313] Bluetooth: hci0: unsupported parameter 5135 [ 383.106525][T20313] Bluetooth: hci0: unsupported parameter 8192 [ 383.106538][T20313] Bluetooth: hci0: unsupported parameter 5135 [ 383.106550][T20313] Bluetooth: hci0: unsupported parameter 8192 [ 383.539299][T20328] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6998'. [ 383.686260][T20336] C: entered promiscuous mode [ 383.691169][T20336] C: left promiscuous mode [ 383.856612][T20345] batadv0: entered promiscuous mode [ 383.876202][T20345] macsec1: entered promiscuous mode [ 383.877649][T20345] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 383.896004][T20345] batadv0: left promiscuous mode [ 383.915097][T20346] xt_IDLETIMER: timeout value is too big [ 385.360831][T20401] sctp: [Deprecated]: syz.4.7034 (pid 20401) Use of int in max_burst socket option deprecated. [ 385.360831][T20401] Use struct sctp_assoc_value instead [ 385.843506][T20418] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7043'. [ 385.866034][T20418] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.7043'. [ 386.036591][T20425] netlink: Setting conntrack mark requires 'commit' flag. [ 386.036625][T20425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.200675][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7048'. [ 386.200708][T20431] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7048'. [ 386.200725][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7048'. [ 386.655010][T20446] netlink: 'syz.1.7056': attribute type 2 has an invalid length. [ 386.655035][T20446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7056'. [ 387.287971][T20463] netlink: 'syz.0.7064': attribute type 32 has an invalid length. [ 387.287995][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7064'. [ 387.532870][T20463] bond2: Setting coupled_control to off (0) [ 387.665993][T20471] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7067'. [ 388.338656][T20494] netlink: 'syz.4.7079': attribute type 1 has an invalid length. [ 389.132124][T20522] netlink: 'syz.4.7092': attribute type 142 has an invalid length. [ 390.010979][T20550] netlink: 'syz.2.7106': attribute type 4 has an invalid length. [ 390.095901][ T37] IPVS: starting estimator thread 0... [ 390.183716][T20556] IPVS: using max 29 ests per chain, 69600 per kthread [ 390.332966][T20566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7114'. [ 390.523701][T20574] Bluetooth: hci0: unsupported parameter 5135 [ 390.523725][T20574] Bluetooth: hci0: unsupported parameter 8192 [ 390.523738][T20574] Bluetooth: hci0: unsupported parameter 5135 [ 390.523750][T20574] Bluetooth: hci0: unsupported parameter 8192 [ 391.155788][T20596] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7128'. [ 391.155817][T20596] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7128'. [ 391.155833][T20596] netlink: 'syz.4.7128': attribute type 5 has an invalid length. [ 391.155846][T20596] netlink: 'syz.4.7128': attribute type 6 has an invalid length. [ 391.155858][T20596] netlink: 35 bytes leftover after parsing attributes in process `syz.4.7128'. [ 391.327119][T20605] netlink: 'syz.3.7132': attribute type 2 has an invalid length. [ 391.327141][T20605] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7132'. [ 391.730935][T20620] netlink: zone id is out of range [ 392.772594][T20653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7156'. [ 393.118946][T20663] netlink: 'syz.4.7161': attribute type 29 has an invalid length. [ 393.142292][T20664] netlink: 272 bytes leftover after parsing attributes in process `syz.3.7159'. [ 394.153950][T20706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7181'. [ 394.153974][T20706] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7181'. [ 394.154015][T20706] netlink: 'syz.2.7181': attribute type 5 has an invalid length. [ 394.217081][T20710] netlink: 80 bytes leftover after parsing attributes in process `syz.3.7184'. [ 394.845223][T20734] veth0_to_bond: entered allmulticast mode [ 395.105351][T20739] Bluetooth: hci0: unsupported parameter 5135 [ 395.105373][T20739] Bluetooth: hci0: unsupported parameter 8192 [ 395.105387][T20739] Bluetooth: hci0: unsupported parameter 5135 [ 395.105399][T20739] Bluetooth: hci0: unsupported parameter 8192 [ 395.684829][T20758] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7208'. [ 396.168629][T20775] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7215'. [ 396.365994][T20781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.761753][T20796] dvmrp0: left allmulticast mode [ 396.762546][T20796] vlan1: left allmulticast mode [ 396.762564][T20796] veth0_vlan: left allmulticast mode [ 397.578721][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7234'. [ 398.484206][T20845] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 398.867016][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7254'. [ 399.055284][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7254'. [ 399.280039][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7258'. [ 399.311235][T20867] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.610661][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7265'. [ 400.216739][T20897] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7274'. [ 401.509643][T20946] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7297'. [ 402.083328][T20973] raw_sendmsg: syz.2.7311 forgot to set AF_INET. Fix it! [ 403.511176][T21020] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 403.588507][T21024] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.589001][T21024] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.589350][T21024] bridge_slave_0: entered allmulticast mode [ 403.641420][T21024] bridge_slave_0: entered promiscuous mode [ 404.419108][T21056] netlink: 'syz.2.7351': attribute type 2 has an invalid length. [ 405.050604][T21079] Bluetooth: hci0: unsupported parameter 5135 [ 405.050626][T21079] Bluetooth: hci0: unsupported parameter 8192 [ 405.050653][T21079] Bluetooth: hci0: unsupported parameter 5135 [ 405.050665][T21079] Bluetooth: hci0: unsupported parameter 8192 [ 405.587156][T21104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.263048][T21129] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 406.521196][T21139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7392'. [ 406.529511][T21144] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7390'. [ 406.531400][T21144] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7390'. [ 406.835326][T21157] netlink: 'syz.1.7399': attribute type 18 has an invalid length. [ 406.964470][ T49] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.964516][ T49] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.964548][ T49] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.964579][ T49] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.065238][ T30] audit: type=1800 audit(1789123305.460:3): pid=21161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7400" name="memory.events" dev="tmpfs" ino=7578 res=0 errno=0 [ 407.103845][ T30] audit: type=1804 audit(1789123305.500:4): pid=21161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.7400" name="/newroot/1510/memory.events" dev="tmpfs" ino=7578 res=1 errno=0 [ 407.895870][T21188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7415'. [ 408.331120][T21200] netlink: zone id is out of range [ 408.331137][T21200] netlink: zone id is out of range [ 408.331145][T21200] netlink: zone id is out of range [ 408.331154][T21200] netlink: zone id is out of range [ 408.331161][T21200] netlink: zone id is out of range [ 408.331169][T21200] netlink: zone id is out of range [ 408.331181][T21200] netlink: zone id is out of range [ 408.331188][T21200] netlink: zone id is out of range [ 408.648770][T21214] netlink: 'syz.2.7426': attribute type 11 has an invalid length. [ 409.435944][T21236] netlink: 'syz.0.7435': attribute type 1 has an invalid length. [ 409.789259][T21245] netlink: 'syz.1.7440': attribute type 2 has an invalid length. [ 409.985250][T21250] Bluetooth: hci0: unsupported parameter 5134 [ 409.985274][T21250] Bluetooth: hci0: unsupported parameter 8192 [ 409.985289][T21250] Bluetooth: hci0: unsupported parameter 5134 [ 409.985302][T21250] Bluetooth: hci0: unsupported parameter 8192 [ 410.399572][T21262] netlink: 198796 bytes leftover after parsing attributes in process `syz.1.7448'. [ 410.399596][T21262] netlink: 'syz.1.7448': attribute type 2 has an invalid length. [ 410.963421][T21287] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7460'. [ 411.056090][T21291] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7463'. [ 411.056406][T21291] xt_policy: neither incoming nor outgoing policy selected [ 411.059964][T21292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7461'. [ 411.270913][T21298] nbd: must specify a size in bytes for the device [ 411.835371][T21325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7479'. [ 411.910869][T21328] ieee802154 phy0 wpan0: encryption failed: -22 [ 411.932099][T21325] macsec1: entered promiscuous mode [ 411.932121][T21325] bridge0: entered promiscuous mode [ 411.950341][T21325] macsec1: entered allmulticast mode [ 411.950363][T21325] bridge0: entered allmulticast mode [ 411.957573][T21325] bridge0: port 3(macsec1) entered blocking state [ 411.975757][T21325] bridge0: port 3(macsec1) entered disabled state [ 412.050690][T21325] bridge0: left allmulticast mode [ 412.335951][ T9] bridge0: left promiscuous mode [ 412.858949][T21352] vcan0: entered allmulticast mode [ 413.723688][T21383] netlink: 'syz.0.7507': attribute type 4 has an invalid length. [ 413.723710][T21383] netlink: 240 bytes leftover after parsing attributes in process `syz.0.7507'. [ 414.303118][T21405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7518'. [ 414.692019][T21421] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7526'. [ 415.302896][T21443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7536'. [ 415.601738][T21451] net_ratelimit: 498 callbacks suppressed [ 415.601844][T21451] ip_tables: iptables: counters copy to user failed while replacing table [ 416.224692][T21473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7552'. [ 416.689961][T21495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.997338][T21508] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.040660][T21546] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7586'. [ 418.844726][T21577] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 418.844761][T21577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.079423][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7621'. [ 420.487910][T21633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7628'. [ 422.208994][T21698] netlink: 'syz.1.7657': attribute type 15 has an invalid length. [ 422.955606][T21728] netlink: 'syz.2.7672': attribute type 83 has an invalid length. [ 423.882281][T21765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7690'. [ 424.217458][T21774] IPVS: persistence engine module ip_vs_pe_À not found [ 424.435110][T21783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7698'. [ 425.348560][T21816] ip_tables: iptables: counters copy to user failed while replacing table [ 425.458972][T21827] erspan0: entered promiscuous mode [ 426.463461][T21869] openvswitch: netlink: IP tunnel dst address not specified [ 426.463493][T21869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.956336][T21888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7744'. [ 427.224932][T21897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7748'. [ 427.224968][T21897] netlink: 'syz.1.7748': attribute type 30 has an invalid length. [ 427.224984][T21897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7748'. [ 427.331230][T21904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7753'. [ 427.588408][T21905] tun0: tun_chr_ioctl cmd 1074025675 [ 427.588432][T21905] tun0: persist disabled [ 428.390692][T21943] bond0: entered promiscuous mode [ 428.402640][T21939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7768'. [ 428.406017][T21943] batadv0: entered promiscuous mode [ 428.441208][T21943] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 428.463570][T21943] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 428.543671][T21943] bond0: left promiscuous mode [ 428.547040][T21943] batadv0: left promiscuous mode [ 429.057796][T21963] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7779'. [ 429.322210][T21971] openvswitch: netlink: EtherType 2 is less than min 600 [ 429.440689][T21975] tipc: Started in network mode [ 429.440720][T21975] tipc: Node identity ac14140f, cluster identity 4711 [ 429.441332][T21975] tipc: New replicast peer: 255.255.255.255 [ 429.462378][T21975] tipc: Enabled bearer , priority 10 [ 430.478803][T22013] Bluetooth: hci1: too big key_count value 32778 [ 430.562468][ T5798] tipc: Node number set to 2886997007 [ 431.626111][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7824'. [ 431.650428][T22058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7824'. [ 432.060317][T22078] veth1_macvtap: left promiscuous mode [ 432.060540][T22078] macsec0: entered allmulticast mode [ 432.168427][T22086] veth1_macvtap: entered promiscuous mode [ 432.168452][T22086] veth1_macvtap: entered allmulticast mode [ 432.180987][T22086] macsec0: left allmulticast mode [ 432.181008][T22086] veth1_macvtap: left allmulticast mode [ 433.060765][T22116] netlink: 'syz.4.7850': attribute type 21 has an invalid length. [ 433.060788][T22116] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7850'. [ 433.459831][T22132] gtp1: entered promiscuous mode [ 433.459854][T22132] gtp1: entered allmulticast mode [ 433.478494][T22134] veth0: entered promiscuous mode [ 433.511654][T22133] veth0: left promiscuous mode [ 433.846976][T22149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7866'. [ 433.926954][T22151] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7867'. [ 434.596801][T22175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7879'. [ 435.560406][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7893'. [ 435.713878][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7893'. [ 435.845066][T22214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7898'. [ 436.834653][T22257] netlink: 'syz.1.7917': attribute type 2 has an invalid length. [ 436.834676][T22257] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7917'. [ 437.453335][T22273] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7925'. [ 437.489857][T22272] sctp: [Deprecated]: syz.2.7924 (pid 22272) Use of int in max_burst socket option deprecated. [ 437.489857][T22272] Use struct sctp_assoc_value instead [ 438.074179][T22281] ipvlan2: entered allmulticast mode [ 438.074206][T22281] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 438.085535][T22281] batman_adv: batadv0: Adding interface: ipvlan2 [ 438.085552][T22281] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.085583][T22281] batman_adv: batadv0: Interface activated: ipvlan2 [ 439.850992][T22345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7960'. [ 440.004827][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.243136][T22359] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7966'. [ 441.596333][ T49] tipc: Subscription rejected, illegal request [ 442.691317][T22447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8009'. [ 442.747449][T22452] smbdirect: ib_dev[s] renamed to [syz2] [ 442.971138][T22457] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8013'. [ 443.352099][T22474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8020'. [ 445.112819][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 446.127985][T22559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8060'. [ 446.213021][T22561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8061'. [ 446.777187][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8072'. [ 446.880626][T22587] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8073'. [ 447.694356][T22620] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8089'. [ 447.996715][T22627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8092'. [ 448.434755][T22642] openvswitch: netlink: IPv4 tunnel dst address is zero [ 448.434787][T22642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.962091][T22665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8111'. [ 448.975174][T22665] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8111'. [ 448.975223][T22665] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8111'. [ 449.009484][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8112'. [ 451.677198][T22755] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 451.939246][T22764] __nla_validate_parse: 1 callbacks suppressed [ 451.939304][T22764] netlink: 71 bytes leftover after parsing attributes in process `syz.3.8160'. [ 452.081085][T22765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8159'. [ 452.377483][T22778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8165'. [ 452.377519][T22778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8165'. [ 452.424369][T22782] openvswitch: netlink: Unknown key attributes 1 [ 452.715626][T22789] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8171'. [ 452.920998][T22796] netlink: 'syz.2.8174': attribute type 5 has an invalid length. [ 452.948584][T22799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8176'. [ 453.192826][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8177'. [ 453.192849][T22803] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8177'. [ 453.192891][T22803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8177'. [ 453.981923][T22824] wlan0 speed is unknown, defaulting to 1000 [ 454.009069][T22824] lo speed is unknown, defaulting to 1000 [ 454.647884][T22848] sctp: [Deprecated]: syz.3.8200 (pid 22848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.647884][T22848] Use struct sctp_sack_info instead [ 456.159823][T22900] macvtap0: entered allmulticast mode [ 456.159848][T22900] veth0_macvtap: entered allmulticast mode [ 457.091348][T22931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8237'. [ 457.421053][T22941] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8242'. [ 458.825295][T22995] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 460.071439][T23043] netlink: 'syz.0.8288': attribute type 10 has an invalid length. [ 460.956020][T23076] netlink: 'syz.1.8303': attribute type 29 has an invalid length. [ 460.964414][T23075] netlink: 'syz.0.8302': attribute type 9 has an invalid length. [ 460.965315][T23076] netlink: 'syz.1.8303': attribute type 29 has an invalid length. [ 460.966830][T23074] netlink: 'syz.2.8304': attribute type 1 has an invalid length. [ 460.988721][T23076] netlink: 'syz.1.8303': attribute type 29 has an invalid length. [ 462.940173][T23154] netlink: 'syz.1.8340': attribute type 5 has an invalid length. [ 463.241178][T23164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8346'. [ 463.351320][T23172] netlink: 248 bytes leftover after parsing attributes in process `syz.4.8350'. [ 464.223749][T23207] nftables ruleset with unbound chain [ 464.419228][T23214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8371'. [ 464.419316][T23214] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8371'. [ 464.559885][T23221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8375'. [ 464.734211][T23225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8378'. [ 464.734256][T23225] block nbd0: Unsupported socket: should be TCP or UNIX. [ 465.105587][T23240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8383'. [ 465.230003][T23245] sch_fq: defrate 0 ignored. [ 466.207635][T23280] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.514816][T23291] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 466.646234][T23296] netlink: 'syz.2.8407': attribute type 12 has an invalid length. [ 466.646258][T23296] netlink: 'syz.2.8407': attribute type 29 has an invalid length. [ 466.646272][T23296] netlink: 148 bytes leftover after parsing attributes in process `syz.2.8407'. [ 466.646289][T23296] netlink: 'syz.2.8407': attribute type 2 has an invalid length. [ 467.667046][T23330] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.667175][T23330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.669133][T23330] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 468.400628][T23358] h: entered promiscuous mode [ 468.892892][T23374] netlink: 'syz.1.8445': attribute type 3 has an invalid length. [ 468.892914][T23374] netlink: 'syz.1.8445': attribute type 1 has an invalid length. [ 468.892927][T23374] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8445'. [ 468.893031][T23374] NCSI netlink: No device for ifindex 813332851 [ 469.013399][T23383] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8450'. [ 469.320015][T23396] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 469.336583][T23397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8456'. [ 469.565729][T23404] openvswitch: netlink: IP tunnel dst address not specified [ 469.565760][T23404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 469.856073][T23410] batman_adv: batadv0: Adding interface: wlan1 [ 469.856091][T23410] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.856118][T23410] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 470.177032][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8467'. [ 470.177879][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8467'. [ 470.816323][T23449] netlink: 'syz.0.8480': attribute type 83 has an invalid length. [ 470.985534][T23453] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8482'. [ 472.126274][T23493] netlink: 'syz.1.8499': attribute type 2 has an invalid length. [ 473.921197][T23552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8525'. [ 474.411664][T23569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8534'. [ 474.475963][T23571] bond2 (unregistering): Released all slaves [ 474.555387][T23572] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8536'. [ 475.336521][T23602] openvswitch: netlink: VLAN attribute unexpected. [ 476.215071][T23634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8565'. [ 476.282351][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8566'. [ 477.146362][T23663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8579'. [ 477.338147][T23668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8581'. [ 477.338171][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8581'. [ 477.537336][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8585'. [ 477.538076][T23675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8585'. [ 479.468202][T23734] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 479.468725][T23734] syzkaller1: linktype set to 823 [ 479.827761][T23750] netlink: 'syz.2.8619': attribute type 33 has an invalid length. [ 479.906989][T23750] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 479.940099][T23750] bond2 (unregistering): Released all slaves [ 480.427449][T23763] ip_tables: iptables: counters copy to user failed while replacing table [ 480.758318][T23775] netlink: 'syz.3.8627': attribute type 16 has an invalid length. [ 480.758340][T23775] netlink: 'syz.3.8627': attribute type 17 has an invalid length. [ 480.798344][T23771] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.803523][T23771] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.079025][T23775] erspan0: entered promiscuous mode [ 481.119974][T23775] 8021q: adding VLAN 0 to HW filter on device .` [ 481.243835][T23775] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.244068][T23775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.250745][T23775] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.250869][T23775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.281657][T23791] __nla_validate_parse: 2 callbacks suppressed [ 481.281676][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8638'. [ 481.331236][T23775] vlan0: left promiscuous mode [ 481.331416][T23775] vlan0: left allmulticast mode [ 481.331430][T23775] veth0_vlan: left allmulticast mode [ 481.366943][T23775] macvtap0: left allmulticast mode [ 481.366966][T23775] veth0_macvtap: left allmulticast mode [ 481.388684][T23775] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 481.456877][T23775] batman_adv: batadv0: Interface activated: wlan1 [ 481.476662][T23775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.481757][T23775] geneve2: left promiscuous mode [ 481.481777][T23775] geneve2: left allmulticast mode [ 481.487417][T23775] geneve3: left promiscuous mode [ 481.487437][T23775] geneve3: left allmulticast mode [ 481.490738][T23775] veth5: left promiscuous mode [ 481.490757][T23775] veth5: left allmulticast mode [ 481.499882][T23775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.546007][T23775] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 481.873530][T23801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8642'. [ 481.925419][T23807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8642'. [ 481.933130][T23801] xfrm1: entered promiscuous mode [ 481.933149][T23801] xfrm1: entered allmulticast mode [ 482.003325][T23806] tap0: tun_chr_ioctl cmd 1074025672 [ 482.003347][T23806] tap0: ignored: set checksum disabled [ 482.329645][T23815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8649'. [ 483.113534][T23845] sctp: [Deprecated]: syz.0.8663 (pid 23845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.113534][T23845] Use struct sctp_sack_info instead [ 483.836375][ T37] wlan1: Trigger new scan to find an IBSS to join [ 485.873213][T23950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8713'. [ 486.272885][T23959] netlink: 'syz.3.8717': attribute type 83 has an invalid length. [ 486.740797][T23976] openvswitch: netlink: Unknown key attributes 1 [ 486.800426][ T1115] wlan1: Trigger new scan to find an IBSS to join [ 487.256817][T23991] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8733'. [ 487.344151][T24000] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8739'. [ 487.551720][T24009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8738'. [ 487.781289][T24018] vxcan0: tx address claim with dest, not broadcast [ 487.920584][T24020] tap0: tun_chr_ioctl cmd 1074025676 [ 487.920606][T24020] tap0: owner set to 0 [ 488.351253][T24037] sctp: [Deprecated]: syz.2.8753 (pid 24037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 488.351253][T24037] Use struct sctp_sack_info instead [ 488.504994][T24044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8756'. [ 488.897684][T24054] netlink: 'syz.0.8761': attribute type 83 has an invalid length. [ 489.235307][ T5622] block nbd0: Receive control failed (result -32) [ 489.714893][T24080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8774'. [ 489.832737][ T37] wlan1: Trigger new scan to find an IBSS to join [ 490.042075][T24094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8781'. [ 490.135468][T24095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8780'. [ 490.135496][T24095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8780'. [ 490.774831][ T65] wlan1: Creating new IBSS network, BSSID 12:99:29:e8:60:91 [ 492.059936][T24161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8811'. [ 492.531055][T24180] netlink: 'syz.3.8820': attribute type 28 has an invalid length. [ 492.531080][T24180] netlink: 'syz.3.8820': attribute type 3 has an invalid length. [ 492.531094][T24180] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8820'. [ 492.671405][T24189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8824'. [ 493.720884][T24231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8844'. [ 493.737078][T24231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8844'. [ 494.996486][T24282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8869'. [ 494.996529][T24282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8869'. [ 496.746703][T24341] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 497.548095][T24364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8909'. [ 499.371675][T24436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8941'. [ 499.371700][T24436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8941'. [ 499.661507][T24445] netlink: 'syz.2.8945': attribute type 1 has an invalid length. [ 499.661528][T24445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8945'. [ 500.049447][T24457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8951'. [ 500.049475][T24457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8951'. [ 500.516146][T24479] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8962'. [ 500.695939][T24485] netlink: 165 bytes leftover after parsing attributes in process `syz.1.8966'. [ 501.379422][T24508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8976'. [ 501.436195][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.187741][T24537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8990'. [ 502.308122][T24543] openvswitch: netlink: Unknown key attributes 1 [ 502.535610][T24549] ip_tables: iptables: counters copy to user failed while replacing table [ 502.858350][T24561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9000'. [ 503.472983][T24586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9011'. [ 503.473020][T24586] netlink: 'syz.2.9011': attribute type 8 has an invalid length. [ 503.473034][T24586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9011'. [ 504.257092][T24612] veth1_macvtap: left promiscuous mode [ 504.844767][T24632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9034'. [ 506.583013][T24704] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9065'. [ 506.591756][T24705] nbd1: detected capacity change from 0 to 63 [ 506.635937][ T5622] block nbd1: Receive control failed (result -104) [ 506.656457][ T26] block nbd1: Dead connection, failed to find a fallback [ 506.656482][ T26] block nbd1: shutting down sockets [ 506.656587][ T26] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 506.656672][ T26] Buffer I/O error on dev nbd1, logical block 1, async page read [ 506.656726][ T26] Buffer I/O error on dev nbd1, logical block 2, async page read [ 506.656740][ T26] Buffer I/O error on dev nbd1, logical block 3, async page read [ 506.952064][T24715] netlink: Only one type of NAT may be specified [ 506.952096][T24715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.465487][T24734] ip_tables: iptables: counters copy to user failed while replacing table [ 507.517187][T24737] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9081'. [ 507.658796][T24740] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9082'. [ 508.449614][T24766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9094'. [ 508.867475][ T5615] block nbd2: Receive control failed (result -32) [ 508.869915][ T5622] block nbd2: Receive control failed (result -32) [ 508.883664][T24778] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 509.194205][T24787] netlink: 'syz.2.9103': attribute type 8 has an invalid length. [ 509.194228][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9103'. [ 509.194525][T24784] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9101'. [ 509.194541][T24784] tipc: Invalid UDP bearer configuration [ 509.194582][T24784] tipc: Enabling of bearer rejected, failed to enable media [ 509.709765][T24804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9112'. [ 509.847663][T24808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9114'. [ 509.969592][T24810] netlink: zone id is out of range [ 509.969608][T24810] netlink: zone id is out of range [ 509.969763][T24810] netlink: zone id is out of range [ 510.307841][T24824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9120'. [ 512.349280][T24882] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9147'. [ 512.793668][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9155'. [ 512.793701][T24902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9155'. [ 513.204507][T24912] netlink: 'syz.4.9159': attribute type 1 has an invalid length. [ 513.204528][T24912] netlink: 'syz.4.9159': attribute type 2 has an invalid length. [ 513.235215][T24912] netlink: 'syz.4.9159': attribute type 1 has an invalid length. [ 513.235238][T24912] netlink: 'syz.4.9159': attribute type 2 has an invalid length. [ 513.561950][T24924] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9166'. [ 514.419791][T24955] netlink: 'syz.1.9180': attribute type 83 has an invalid length. [ 515.301760][T24980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9192'. [ 515.407512][T24987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9196'. [ 516.061028][T25006] netlink: 'syz.1.9204': attribute type 2 has an invalid length. [ 516.061050][T25006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9204'. [ 517.053524][T25043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.913907][T25080] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9241'. [ 518.096213][T25087] IPv6: Can't replace route, no match found [ 518.098596][T25087] IPv6: Can't replace route, no match found [ 518.794844][T25118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9258'. [ 518.998607][T25128] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9261'. [ 519.940924][T25167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9282'. [ 520.020916][T25169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9283'. [ 520.084728][T25171] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9285'. [ 520.420818][T25182] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9290'. [ 521.271411][T25213] netlink: 'syz.3.9305': attribute type 30 has an invalid length. [ 521.864341][T25229] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.9312'. [ 522.588289][ T5622] block nbd3: Receive control failed (result -32) [ 522.644261][T25262] netlink: 'syz.3.9327': attribute type 1 has an invalid length. [ 522.644282][T25262] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9327'. [ 522.644299][T25262] netlink: 'syz.3.9327': attribute type 2 has an invalid length. [ 522.644311][T25262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9327'. [ 522.883201][T25265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9329'. [ 523.207144][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 523.563254][T25291] sctp: [Deprecated]: syz.1.9341 (pid 25291) Use of int in maxseg socket option. [ 523.563254][T25291] Use struct sctp_assoc_value instead [ 524.462975][T25323] tun0: tun_chr_ioctl cmd 1074025675 [ 524.462997][T25323] tun0: persist enabled [ 524.795861][T25335] netlink: 'syz.1.9361': attribute type 1 has an invalid length. [ 524.795885][T25335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9361'. [ 525.107701][T25347] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9368'. [ 525.558493][T25361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9375'. [ 525.806294][T25369] netlink: 'syz.2.9379': attribute type 1 has an invalid length. [ 525.903815][T25374] netlink: 'syz.2.9383': attribute type 6 has an invalid length. [ 526.572011][T25400] netlink: 'syz.3.9394': attribute type 21 has an invalid length. [ 526.572035][T25400] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9394'. [ 526.572105][T25400] netlink: 'syz.3.9394': attribute type 4 has an invalid length. [ 526.572118][T25400] netlink: 'syz.3.9394': attribute type 5 has an invalid length. [ 526.572131][T25400] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9394'. [ 526.620873][T25400] netlink: 'syz.3.9394': attribute type 21 has an invalid length. [ 526.620895][T25400] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9394'. [ 526.620945][T25400] netlink: 'syz.3.9394': attribute type 4 has an invalid length. [ 526.620959][T25400] netlink: 'syz.3.9394': attribute type 5 has an invalid length. [ 526.620971][T25400] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9394'. [ 526.899871][T25406] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.9396'. [ 527.041469][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9399'. [ 527.698214][T25433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9407'. [ 528.671969][T25457] netlink: 'syz.2.9419': attribute type 1 has an invalid length. [ 528.671994][T25457] netlink: 'syz.2.9419': attribute type 1 has an invalid length. [ 528.791146][T25463] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 529.050567][ T5622] block nbd4: Receive control failed (result -107) [ 529.791498][T25492] veth0: entered promiscuous mode [ 529.799756][T25491] veth0: left promiscuous mode [ 530.619978][T25515] ip_tables: iptables: counters copy to user failed while replacing table [ 531.289253][T25536] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 531.291301][ T12] IPVS: starting estimator thread 0... [ 531.380939][T25545] IPVS: using max 31 ests per chain, 74400 per kthread [ 533.841254][T25617] sctp: [Deprecated]: syz.0.9487 (pid 25617) Use of int in max_burst socket option deprecated. [ 533.841254][T25617] Use struct sctp_assoc_value instead [ 533.965604][T25630] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.057518][T25668] __nla_validate_parse: 6 callbacks suppressed [ 535.057539][T25668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9511'. [ 535.058859][ T5622] block nbd5: Receive control failed (result -107) [ 535.445606][T25681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9517'. [ 536.078578][T25709] IPVS: Error connecting to the multicast addr [ 536.455307][T25721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9535'. [ 536.455342][T25721] netlink: 'syz.3.9535': attribute type 10 has an invalid length. [ 536.455359][T25721] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9535'. [ 536.516813][T25723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9537'. [ 536.646978][ T26] block nbd1: Possible stuck request ffff888026e4e000: control (read@0,1024B). Runtime 30 seconds [ 537.170665][T25743] netlink: 'syz.2.9547': attribute type 1 has an invalid length. [ 537.309839][T25749] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 537.421497][T25754] vcan0: tx address claim with dest, not broadcast [ 538.763675][T25791] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9567'. [ 538.883245][T25797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9569'. [ 538.883280][T25797] netlink: 'syz.3.9569': attribute type 7 has an invalid length. [ 538.883293][T25797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9569'. [ 538.965678][T25801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9572'. [ 538.985211][T25802] netlink: 27 bytes leftover after parsing attributes in process `syz.4.9571'. [ 539.347482][T25813] netlink: 'syz.4.9577': attribute type 39 has an invalid length. [ 539.740650][T25827] netlink: 'syz.2.9584': attribute type 7 has an invalid length. [ 539.740672][T25827] netlink: 'syz.2.9584': attribute type 8 has an invalid length. [ 540.069486][T25839] veth0_macvtap: left promiscuous mode [ 540.416129][T25841] syzkaller1: entered promiscuous mode [ 540.416346][T25841] syzkaller1: entered allmulticast mode [ 541.203550][T25881] netlink: 'syz.3.9608': attribute type 2 has an invalid length. [ 541.209069][T25881] netlink: 'syz.3.9608': attribute type 2 has an invalid length. [ 541.209090][T25881] __nla_validate_parse: 3 callbacks suppressed [ 541.209101][T25881] netlink: 67 bytes leftover after parsing attributes in process `syz.3.9608'. [ 541.414494][T25890] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9611'. [ 542.276949][T25915] netlink: 'syz.0.9624': attribute type 12 has an invalid length. [ 542.276985][T25915] netlink: 'syz.0.9624': attribute type 29 has an invalid length. [ 542.276999][T25915] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9624'. [ 542.277017][T25915] netlink: 'syz.0.9624': attribute type 3 has an invalid length. [ 542.277029][T25915] netlink: 'syz.0.9624': attribute type 2 has an invalid length. [ 542.277041][T25915] netlink: 35 bytes leftover after parsing attributes in process `syz.0.9624'. [ 542.819157][T25935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9631'. [ 543.507494][T25955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9640'. [ 543.507533][T25955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9640'. [ 543.744587][T25963] ieee802154 phy0 wpan0: encryption failed: -22 [ 543.834122][T25967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9646'. [ 543.834146][T25967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9646'. [ 544.094912][T25975] nbd: nbd0 already in use [ 544.095288][T25975] block nbd0: NBD_DISCONNECT [ 544.095358][T25975] block nbd0: Send disconnect failed -32 [ 544.095375][T25975] block nbd0: shutting down sockets [ 544.157663][T25978] netlink: 83 bytes leftover after parsing attributes in process `syz.4.9650'. [ 545.099624][T26013] batadv_slave_1: entered promiscuous mode [ 545.109073][T26010] batadv_slave_1: left promiscuous mode [ 545.530985][T26026] netlink: 'syz.2.9672': attribute type 2 has an invalid length. [ 545.531007][T26026] netlink: 'syz.2.9672': attribute type 2 has an invalid length. [ 546.959310][T26078] netlink: 'syz.1.9697': attribute type 2 has an invalid length. [ 547.491780][T26095] __nla_validate_parse: 2 callbacks suppressed [ 547.491801][T26095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9705'. [ 547.547726][T26099] netlink: 'syz.4.9707': attribute type 1 has an invalid length. [ 547.547748][T26099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9707'. [ 547.548886][T26101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9708'. [ 548.316807][T26123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9719'. [ 548.317272][T26122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9718'. [ 548.317303][T26122] netlink: 'syz.0.9718': attribute type 7 has an invalid length. [ 548.317315][T26122] netlink: 'syz.0.9718': attribute type 8 has an invalid length. [ 548.317326][T26122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9718'. [ 548.858281][T26137] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.185131][T26184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9744'. [ 550.185899][T26184] netlink: 'syz.0.9744': attribute type 1 has an invalid length. [ 550.185915][T26184] netlink: 'syz.0.9744': attribute type 2 has an invalid length. [ 551.166952][T26223] netlink: 380 bytes leftover after parsing attributes in process `syz.2.9759'. [ 551.167040][T26223] netlink: 159 bytes leftover after parsing attributes in process `syz.2.9759'. [ 551.206217][T26222] vcan0: tx address claim with dlc 0 [ 551.514541][T26236] netlink: 'syz.0.9763': attribute type 1 has an invalid length. [ 551.514564][T26236] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.9763'. [ 551.514592][T26236] netlink: 'syz.0.9763': attribute type 1 has an invalid length. [ 552.531763][T26270] tipc: New replicast peer: 0.0.0.0 [ 552.537079][T26270] tipc: Enabled bearer , priority 10 [ 552.562430][T26272] __nla_validate_parse: 1 callbacks suppressed [ 552.562451][T26272] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9777'. [ 552.709195][T26274] vcan0: tx address claim with broadcast sa [ 553.216686][T26292] xt_hashlimit: size too large, truncated to 1048576 [ 553.655770][ T5798] tipc: Node number set to 3758096385 [ 554.384285][T26328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9798'. [ 555.193912][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 555.195190][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.356874][T26368] syz_tun: entered allmulticast mode [ 555.410553][T26370] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9815'. [ 555.410579][T26370] openvswitch: netlink: Message has 4 unknown bytes. [ 555.902859][T26383] netlink: 'syz.2.9821': attribute type 3 has an invalid length. [ 555.923258][T26384] ªªªªª»: renamed from dummy0 (while UP) [ 555.992460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.159234][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9826'. [ 556.194254][T26397] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9827'. [ 556.233985][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.249913][T26399] netlink: Failed to add  helper -22 [ 556.249962][T26399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.554533][T26405] sctp: [Deprecated]: syz.3.9830 (pid 26405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.554533][T26405] Use struct sctp_sack_info instead [ 556.792640][T26410] netlink: 'syz.2.9832': attribute type 17 has an invalid length. [ 556.792663][T26410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9832'. [ 556.792688][T26410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9832'. [ 556.813799][T26415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9835'. [ 556.870100][T26410] gretap0: entered promiscuous mode [ 556.886160][T26410] gretap0: left promiscuous mode [ 557.032700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.272679][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.502834][T26431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9843'. [ 557.534063][T26429] syzkaller1: entered promiscuous mode [ 557.534085][T26429] syzkaller1: entered allmulticast mode [ 557.762732][T25403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.072345][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.281395][T26452] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9853'. [ 559.137099][T26480] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.9865'. [ 559.547500][T26494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9870'. [ 559.851847][T26488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9868'. [ 560.393221][ T5798] net_ratelimit: 4 callbacks suppressed [ 560.393244][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.192412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.436204][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.920945][T26561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9900'. [ 562.232486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.472763][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.557550][T26584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.557633][T26584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.557696][T26584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.557758][T26584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.557822][T26584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.875459][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.253937][T26595] syz_tun: entered allmulticast mode [ 563.257161][T26595] syz_tun: left allmulticast mode [ 563.758988][T26602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9919'. [ 564.514268][ T13] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 564.737608][T26620] geneve5: entered promiscuous mode [ 564.784206][ T59] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 39615 - 0 [ 564.784250][ T59] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 39615 - 0 [ 564.784282][ T59] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 39615 - 0 [ 564.784315][ T59] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 39615 - 0 [ 565.595381][ T5798] net_ratelimit: 2433 callbacks suppressed [ 565.595402][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.625279][T26647] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 566.161260][T26659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9946'. [ 566.161296][T26659] bond0: ARP target 8.4.0.0 is already present [ 566.161316][T26659] bond0: option arp_ip_target: invalid value (1032) [ 566.392500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.481623][T26666] netlink: 'syz.3.9948': attribute type 11 has an invalid length. [ 566.633585][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.714871][ T26] block nbd1: Possible stuck request ffff888026e4e000: control (read@0,1024B). Runtime 60 seconds [ 567.409314][T26691] veth0: entered promiscuous mode [ 567.420683][T26690] veth0: left promiscuous mode [ 567.432334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.672772][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.992555][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.472904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.687761][T26740] macvlan0: entered promiscuous mode [ 568.713747][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.210887][T26760] trusted_key: syz.4.9992 sent an empty control message without MSG_MORE. [ 569.273035][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.343404][T26762] bridge0: port 3(veth0) entered blocking state [ 569.343512][T26762] bridge0: port 3(veth0) entered disabled state [ 569.343675][T26762] veth0: entered allmulticast mode [ 569.363610][T26762] veth0: entered promiscuous mode [ 569.364223][T26762] bridge0: port 3(veth0) entered blocking state [ 569.364350][T26762] bridge0: port 3(veth0) entered forwarding state [ 569.753594][T22090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.185051][T26786] wlan0 speed is unknown, defaulting to 1000 [ 570.205706][T26786] lo speed is unknown, defaulting to 1000 [ 570.558655][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10012'. [ 570.559148][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10012'. [ 570.755417][T26813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10015'. [ 570.805564][ T5798] net_ratelimit: 3 callbacks suppressed [ 570.805585][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.205291][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.789632][T26841] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10029'. [ 571.833696][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.232348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.365842][T26864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.366580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.370864][T26864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.371312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.784689][T26874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10044'. [ 572.888110][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.990262][T26878] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.120819][T26882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10047'. [ 573.120846][T26882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10047'. [ 573.121074][T26882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10047'. [ 573.121092][T26882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10047'. [ 573.272415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.196253][T26881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.499539][T26881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.763717][T26881] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.423047][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.517183][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.589870][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.683112][ T65] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.867242][T26963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10070'. [ 576.154436][ T25] net_ratelimit: 9 callbacks suppressed [ 576.154455][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.304698][T26975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10075'. [ 576.392372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.719473][T26996] netlink: 'syz.1.10080': attribute type 1 has an invalid length. [ 576.719494][T26996] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10080'. [ 576.719510][T26996] netlink: 'syz.1.10080': attribute type 2 has an invalid length. [ 576.719523][T26996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10080'. [ 577.029781][T27000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.032932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.033004][T27005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10086'. [ 577.033026][T27005] block nbd0: Unsupported socket: should be TCP or UNIX. [ 577.088384][T27006] block nbd1: NBD_DISCONNECT [ 577.088411][T27006] block nbd1: Send disconnect failed -32 [ 577.102208][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.102345][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 577.107914][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.107944][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 577.108057][ T26] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.108081][ T26] Buffer I/O error on dev nbd1, logical block 1, async page read [ 577.108166][ T26] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.108189][ T26] Buffer I/O error on dev nbd1, logical block 2, async page read [ 577.108281][ T26] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.108304][ T26] Buffer I/O error on dev nbd1, logical block 3, async page read [ 577.109571][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.109599][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 577.109982][ T26] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.110007][ T26] Buffer I/O error on dev nbd1, logical block 1, async page read [ 577.110164][ T26] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.110188][ T26] Buffer I/O error on dev nbd1, logical block 2, async page read [ 577.110283][ T26] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.110306][ T26] Buffer I/O error on dev nbd1, logical block 3, async page read [ 577.110412][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 577.110434][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 577.119769][ T5623] ldm_validate_partition_table(): Disk read failed. [ 577.131067][ T5623] Dev nbd1: unable to read RDB block 0 [ 577.140361][ T5623] nbd1: unable to read partition table [ 577.334166][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.348096][ T5623] ldm_validate_partition_table(): Disk read failed. [ 577.353776][ T5623] Dev nbd1: unable to read RDB block 0 [ 577.361099][ T5623] nbd1: unable to read partition table [ 577.432546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.542028][T27019] syzkaller1: entered promiscuous mode [ 577.547891][T27019] syzkaller1: entered allmulticast mode [ 577.908608][T27018] veth1_macvtap: entered promiscuous mode [ 578.033210][T27018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.396594][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.472332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.445981][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.512383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.544999][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10117'. [ 579.559428][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10117'. [ 580.860062][T27125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10139'. [ 581.513856][ T5798] net_ratelimit: 2 callbacks suppressed [ 581.513877][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.900884][T27165] sctp: [Deprecated]: syz.3.10156 (pid 27165) Use of int in max_burst socket option. [ 581.900884][T27165] Use struct sctp_assoc_value instead [ 582.075144][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.562335][T27187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10165'. [ 582.562362][T27187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10165'. [ 582.929534][T27201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10170'. [ 583.112364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.592912][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.027765][T27248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10193'. [ 584.152446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.198386][T27248] macvlan0: left promiscuous mode [ 584.199843][T27248] netlink: 'syz.1.10193': attribute type 1 has an invalid length. [ 584.199862][T27248] netlink: 'syz.1.10193': attribute type 2 has an invalid length. [ 584.394992][T27258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10196'. [ 584.395015][T27258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10196'. [ 584.395242][T27258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10196'. [ 584.395257][T27258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10196'. [ 584.632938][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.700842][T27262] netlink: 'syz.1.10198': attribute type 1 has an invalid length. [ 584.997733][T27268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10201'. [ 585.000282][T27268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10201'. [ 585.192635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.673017][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.937481][ T1115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.232376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.713377][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.932137][T27330] netlink: 'syz.3.10232': attribute type 5 has an invalid length. [ 586.932170][T27330] netlink: 'syz.3.10232': attribute type 9 has an invalid length. [ 587.076910][T27336] netlink: 'syz.4.10234': attribute type 1 has an invalid length. [ 587.198963][T25403] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 587.270742][T27342] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 587.272438][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.715464][T27359] __nla_validate_parse: 5 callbacks suppressed [ 587.715483][T27359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10245'. [ 587.753392][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.312662][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.587615][T27389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10259'. [ 588.705427][T27395] veth1_to_bond: entered allmulticast mode [ 588.722318][T27395] veth1_to_bond: entered promiscuous mode [ 588.723947][T27395] veth1_to_bond: left promiscuous mode [ 588.724907][T27395] veth1_to_bond: left allmulticast mode [ 588.793335][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.352307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.855106][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.393111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.659629][T27446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10286'. [ 590.659664][T27446] netlink: 'syz.4.10286': attribute type 1 has an invalid length. [ 590.659679][T27446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10286'. [ 590.660760][T27446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10286'. [ 590.660786][T27446] netlink: 'syz.4.10286': attribute type 1 has an invalid length. [ 590.660799][T27446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10286'. [ 590.873394][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.019007][T27462] netlink: 'syz.1.10292': attribute type 12 has an invalid length. [ 591.019030][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10292'. [ 591.087697][T27462] netlink: 'syz.1.10292': attribute type 12 has an invalid length. [ 591.087728][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10292'. [ 591.159668][T27471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10297'. [ 591.159691][T27471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10297'. [ 591.323501][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.326647][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.326689][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.326723][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.693715][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.913274][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.953248][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.762513][T27540] netlink: 'syz.1.10327': attribute type 14 has an invalid length. [ 593.762538][T27540] __nla_validate_parse: 5 callbacks suppressed [ 593.762549][T27540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10327'. [ 593.770075][T27540] netlink: 'syz.1.10327': attribute type 14 has an invalid length. [ 593.770096][T27540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10327'. [ 593.992721][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.007173][T27546] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 594.505780][T27565] atomic_op ffff888025b5e9e0 conn xmit_atomic 0000000000000000 [ 594.810902][T27578] netlink: 'syz.2.10343': attribute type 16 has an invalid length. [ 594.810933][T27578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10343'. [ 595.033045][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.111439][T27591] ip_tables: iptables: counters copy to user failed while replacing table [ 595.235300][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052b5b000: rx timeout, send abort [ 595.744846][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807adddc00: rx timeout, send abort [ 595.744908][ C1] vcan0: j1939_tp_rxtimer: 0xffff888052b5b000: abort rx timeout. Force session deactivation [ 595.976035][T27620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10357'. [ 596.030380][T27620] hsr_slave_1 (unregistering): left promiscuous mode [ 596.078441][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.244896][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807adddc00: abort rx timeout. Force session deactivation [ 596.281457][T27630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10361'. [ 596.311445][T27630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10361'. [ 596.557922][T27640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.113295][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.194486][T27659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10374'. [ 597.432778][T25403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.602396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.623402][T27670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10380'. [ 597.990215][T27675] wlan0 speed is unknown, defaulting to 1000 [ 598.014934][T27675] lo speed is unknown, defaulting to 1000 [ 598.152891][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.632362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.906151][T27704] netlink: 'syz.4.10392': attribute type 39 has an invalid length. [ 599.192667][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.422622][T27722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10399'. [ 599.672602][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.884169][T27733] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10405'. [ 599.885708][T27736] netlink: 'syz.4.10403': attribute type 15 has an invalid length. [ 599.885728][T27736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10403'. [ 599.980763][T27736] netlink: 'syz.4.10403': attribute type 15 has an invalid length. [ 599.980785][T27736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10403'. [ 599.983338][ T59] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 599.989329][ T59] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 2816 - 0 [ 599.989367][ T59] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 599.989398][ T59] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 600.234206][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.330320][T27745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10408'. [ 600.438676][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10413'. [ 600.438702][T27756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10413'. [ 600.438726][T27756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10413'. [ 600.489519][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10413'. [ 600.489598][T27756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10413'. [ 600.502712][ T1115] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 600.506314][ T1115] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 600.506353][ T1115] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 600.506384][ T1115] netdevsim netdevsim4 : set [0, 1] type 1 family 0 port 8472 - 0 [ 600.712323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.214296][T27770] nbd: nbd64 already in use [ 601.274271][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.470487][ T5623] udevd[5623]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 601.565847][T27784] xt_CT: No such helper "netbios-ns" [ 601.986205][T27804] netlink: 'syz.3.10433': attribute type 5 has an invalid length. [ 601.986227][T27804] netlink: 'syz.3.10433': attribute type 9 has an invalid length. [ 601.990524][T27796] netlink: 'syz.0.10429': attribute type 13 has an invalid length. [ 602.040557][T27796] netlink: 'syz.0.10429': attribute type 13 has an invalid length. [ 602.052444][T25403] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.052488][T25403] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.052521][T25403] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.052553][T25403] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 602.313356][ T25] net_ratelimit: 1 callbacks suppressed [ 602.313376][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.516590][T27821] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.553674][T25403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.790882][T27830] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 602.792595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.353606][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.846309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.397276][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.605291][T27888] __nla_validate_parse: 11 callbacks suppressed [ 604.605311][T27888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10469'. [ 604.605332][T27888] netlink: 'syz.3.10469': attribute type 1 has an invalid length. [ 604.605345][T27888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10469'. [ 604.843347][T27891] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10472'. [ 604.847447][T27891] bridge0: port 3(veth0) entered disabled state [ 604.847823][T27891] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.879151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.922831][T27895] netlink: 'syz.0.10473': attribute type 11 has an invalid length. [ 605.030110][T27893] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10472'. [ 605.189401][T27903] netlink: 'syz.0.10476': attribute type 5 has an invalid length. [ 605.432558][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.778027][T27920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10484'. [ 605.922107][T27924] netlink: 'syz.1.10486': attribute type 12 has an invalid length. [ 606.444668][T27933] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 606.506645][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.512630][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.685176][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.950921][T27980] netlink: 'syz.0.10509': attribute type 9 has an invalid length. [ 607.950943][T27980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10509'. [ 607.951176][T27980] netlink: 'syz.0.10509': attribute type 9 has an invalid length. [ 607.951190][T27980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10509'. [ 607.989340][T27978] netlink: 512 bytes leftover after parsing attributes in process `syz.1.10508'. [ 608.315580][T25403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.384974][T27994] netlink: 'syz.4.10516': attribute type 2 has an invalid length. [ 608.393958][T27994] netlink: 'syz.4.10516': attribute type 2 has an invalid length. [ 608.393978][T27994] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.10516'. [ 608.559317][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.712529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.857838][T28007] netlink: 'syz.4.10522': attribute type 20 has an invalid length. [ 608.857862][T28007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10522'. [ 608.858086][T28007] netlink: 'syz.4.10522': attribute type 20 has an invalid length. [ 609.411250][T28022] batadv_slave_0: entered promiscuous mode [ 609.412186][T28022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.593304][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.627093][T28022] batadv_slave_0 (unregistering): left promiscuous mode [ 609.631431][T28022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.752845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.010490][T28039] netlink: 'syz.1.10537': attribute type 1 has an invalid length. [ 610.097336][T28039] bond2: entered promiscuous mode [ 610.097786][T28039] 8021q: adding VLAN 0 to HW filter on device bond2 [ 610.158943][T28045] xt_hashlimit: size too large, truncated to 1048576 [ 610.198110][T28043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 610.198488][T28043] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 610.198508][T28043] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 610.296528][T28043] bond2: (slave xfrm1): making interface the new active one [ 610.296556][T28043] xfrm1: entered promiscuous mode [ 610.318322][T28043] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 610.651482][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.681034][T28055] netlink: 'syz.1.10542': attribute type 1 has an invalid length. [ 610.790896][T28055] 8021q: adding VLAN 0 to HW filter on device bond3 [ 610.793504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.895611][T28059] veth0_to_bond: left allmulticast mode [ 610.916963][T28059] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 611.211573][T28065] __nla_validate_parse: 2 callbacks suppressed [ 611.211593][T28065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10545'. [ 611.672863][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.703120][T28076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10550'. [ 611.703156][T28076] netlink: 'syz.2.10550': attribute type 6 has an invalid length. [ 611.703168][T28076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10550'. [ 611.704023][T28076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10550'. [ 611.704055][T28076] netlink: 'syz.2.10550': attribute type 6 has an invalid length. [ 611.704069][T28076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10550'. [ 611.821854][T28078] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10551'. [ 612.531168][T28101] netlink: 'syz.0.10561': attribute type 1 has an invalid length. [ 612.573543][T28101] 8021q: adding VLAN 0 to HW filter on device bond3 [ 612.596343][T28101] bond3: (slave gretap2): making interface the new active one [ 612.597424][T28101] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 612.713806][ T25] net_ratelimit: 1 callbacks suppressed [ 612.713826][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.790994][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10563'. [ 612.791030][T28110] netlink: 'syz.4.10563': attribute type 10 has an invalid length. [ 612.791046][T28110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10563'. [ 612.872495][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.176542][T28109] syzkaller1: entered promiscuous mode [ 613.176564][T28109] syzkaller1: entered allmulticast mode [ 613.753540][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.913316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.077205][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.673451][T28154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10581'. [ 614.679728][T28154] veth0_to_bond: entered allmulticast mode [ 614.797798][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.952332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.013415][T28165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10585'. [ 615.382340][T28177] ip_tables: iptables: counters copy to user failed while replacing table [ 615.835072][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.980752][T28199] netlink: 'syz.1.10599': attribute type 1 has an invalid length. [ 615.992754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.198099][T28199] 8021q: adding VLAN 0 to HW filter on device bond4 [ 616.386300][T28211] __nla_validate_parse: 1 callbacks suppressed [ 616.386321][T28211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10603'. [ 618.072124][T28240] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10616'. [ 618.152538][ T5711] net_ratelimit: 1 callbacks suppressed [ 618.152558][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.432109][T28255] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10621'. [ 618.563771][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.878730][T28280] netlink: 'syz.1.10631': attribute type 4 has an invalid length. [ 618.969530][T28282] netlink: 112 bytes leftover after parsing attributes in process `syz.3.10634'. [ 619.194054][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 619.218033][ T5798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.592454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.861240][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.083093][T28324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.083269][T28324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.083412][T28324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.087604][T28324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.087784][T28324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.297411][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10652'. [ 620.331365][T28331] bridge0: port 3(veth0) entered blocking state [ 620.331492][T28331] bridge0: port 3(veth0) entered forwarding state [ 620.331837][T28331] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.331943][T28331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.406606][T28331] veth1_macvtap: entered promiscuous mode [ 620.558218][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.558424][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.475003][T28270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 621.765151][T28347] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 621.765291][T28347] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 621.818032][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10662'. [ 621.818055][T28353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10662'. [ 622.148324][T28366] netlink: 'syz.1.10669': attribute type 4 has an invalid length. [ 622.229394][T28367] netlink: 'syz.1.10669': attribute type 4 has an invalid length. [ 622.851580][T28388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10677'. [ 622.851616][T28388] netlink: 'syz.3.10677': attribute type 7 has an invalid length. [ 622.851630][T28388] netlink: 'syz.3.10677': attribute type 8 has an invalid length. [ 622.851642][T28388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10677'. [ 623.163057][T28397] net_ratelimit: 348 callbacks suppressed [ 623.163078][T28397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.163235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.163493][T28397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.163644][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.164190][T28397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.164347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.164565][T28397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.164709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.164929][T28397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.165116][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.937789][T28409] netlink: 'syz.0.10686': attribute type 4 has an invalid length. [ 623.995269][T28415] netlink: 'syz.0.10686': attribute type 4 has an invalid length. [ 624.042366][T28417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10691'. [ 624.052547][T28413] netlink: 'syz.3.10689': attribute type 4 has an invalid length. [ 624.077000][T28419] netlink: 'syz.3.10689': attribute type 4 has an invalid length. [ 624.115720][T28421] netlink: 'syz.2.10691': attribute type 16 has an invalid length. [ 624.211925][ T25] lo speed is unknown, defaulting to 1000 [ 624.228013][ T57] lo speed is unknown, defaulting to 1000 [ 624.909067][T28456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10705'. [ 624.909103][T28456] netlink: 'syz.3.10705': attribute type 10 has an invalid length. [ 624.909119][T28456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10705'. [ 624.958176][T28456] geneve6: entered promiscuous mode [ 624.958200][T28456] geneve6: entered allmulticast mode [ 625.177485][T28464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10708'. [ 625.177508][T28464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10708'. [ 625.834703][ T5622] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 626.172094][T28492] IPv6: NLM_F_CREATE should be specified when creating new route [ 627.785488][T28540] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10743'. [ 627.788381][T28450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 628.570102][T28564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10753'. [ 628.715219][ T37] net_ratelimit: 954 callbacks suppressed [ 628.715239][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.716118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.718419][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.966492][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.349921][T28590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.664440][T28603] xt_hashlimit: size too large, truncated to 1048576 [ 629.704575][T28608] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 629.790311][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.993414][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.392315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.424862][T28629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.752077][T28645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10785'. [ 630.791333][ T5622] block nbd1: Receive control failed (result -107) [ 630.833536][T28647] validate_nla: 1 callbacks suppressed [ 630.833558][T28647] netlink: 'syz.3.10783': attribute type 10 has an invalid length. [ 631.007878][T28647] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 631.108520][T28648] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 631.108779][T28648] syzkaller1: linktype set to 823 [ 631.727936][T28674] netlink: 'syz.0.10793': attribute type 18 has an invalid length. [ 631.727959][T28674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10793'. [ 631.728183][T28674] netlink: 'syz.0.10793': attribute type 18 has an invalid length. [ 631.728197][T28674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10793'. [ 632.001092][ T59] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 633.002609][T28710] [ 633.004993][T28710] ====================================================== [ 633.012091][T28710] WARNING: possible circular locking dependency detected [ 633.019202][T28710] syzkaller #0 Not tainted [ 633.023623][T28710] ------------------------------------------------------ [ 633.030702][T28710] syz.3.10810/28710 is trying to acquire lock: [ 633.036900][T28710] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 633.047562][T28710] [ 633.047562][T28710] but task is already holding lock: [ 633.054916][T28710] ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 633.065224][T28710] [ 633.065224][T28710] which lock already depends on the new lock. [ 633.065224][T28710] [ 633.075641][T28710] [ 633.075641][T28710] the existing dependency chain (in reverse order) is: [ 633.084643][T28710] [ 633.084643][T28710] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 633.092438][T28710] cpus_read_lock+0x42/0x160 [ 633.097579][T28710] static_key_enable+0x12/0x20 [ 633.102871][T28710] tcp_enable_tx_delay+0x253/0x330 [ 633.108606][T28710] do_tcp_setsockopt+0x136b/0x1f80 [ 633.114234][T28710] do_sock_setsockopt+0x17c/0x1b0 [ 633.119891][T28710] __x64_sys_setsockopt+0x13d/0x1b0 [ 633.125605][T28710] do_syscall_64+0x166/0x520 [ 633.130777][T28710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.137203][T28710] [ 633.137203][T28710] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 633.144839][T28710] lock_sock_nested+0x41/0x100 [ 633.150162][T28710] inet_shutdown+0x6a/0x390 [ 633.155239][T28710] nbd_mark_nsock_dead+0x2cb/0x550 [ 633.160937][T28710] recv_work+0x1cee/0x1e10 [ 633.165860][T28710] process_scheduled_works+0xc3d/0x1630 [ 633.171923][T28710] worker_thread+0xa47/0xfb0 [ 633.177027][T28710] kthread+0x38b/0x480 [ 633.181621][T28710] ret_from_fork+0x514/0xb70 [ 633.186732][T28710] ret_from_fork_asm+0x1a/0x30 [ 633.192023][T28710] [ 633.192023][T28710] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 633.199655][T28710] __mutex_lock+0x19d/0x1550 [ 633.204804][T28710] nbd_queue_rq+0x373/0xff0 [ 633.209813][T28710] blk_mq_dispatch_rq_list+0x499/0x1990 [ 633.215956][T28710] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 633.222841][T28710] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 633.229332][T28710] blk_mq_run_work_fn+0x16c/0x300 [ 633.234869][T28710] process_scheduled_works+0xc3d/0x1630 [ 633.240926][T28710] worker_thread+0xa47/0xfb0 [ 633.246028][T28710] kthread+0x38b/0x480 [ 633.250606][T28710] ret_from_fork+0x514/0xb70 [ 633.255700][T28710] ret_from_fork_asm+0x1a/0x30 [ 633.260982][T28710] [ 633.260982][T28710] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 633.268181][T28710] __mutex_lock+0x19d/0x1550 [ 633.273287][T28710] nbd_queue_rq+0xc1/0xff0 [ 633.278212][T28710] blk_mq_dispatch_rq_list+0x499/0x1990 [ 633.284266][T28710] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 633.291104][T28710] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 633.297601][T28710] blk_mq_run_work_fn+0x16c/0x300 [ 633.303137][T28710] process_scheduled_works+0xc3d/0x1630 [ 633.309199][T28710] worker_thread+0xa47/0xfb0 [ 633.314304][T28710] kthread+0x38b/0x480 [ 633.318884][T28710] ret_from_fork+0x514/0xb70 [ 633.323981][T28710] ret_from_fork_asm+0x1a/0x30 [ 633.329290][T28710] [ 633.329290][T28710] -> #4 (set->srcu){.+.+}-{0:0}: [ 633.336426][T28710] __synchronize_srcu+0xc9/0x2f0 [ 633.341917][T28710] elevator_switch+0x1e8/0x7b0 [ 633.347263][T28710] elevator_change+0x2fa/0x480 [ 633.352544][T28710] elevator_set_default+0x375/0x440 [ 633.358253][T28710] blk_register_queue+0x3f3/0x4e0 [ 633.363847][T28710] __add_disk+0x6b8/0xdb0 [ 633.368704][T28710] add_disk_fwnode+0x100/0x3a0 [ 633.373988][T28710] nbd_dev_add+0x733/0xb60 [ 633.378917][T28710] nbd_init+0x168/0x1f0 [ 633.383685][T28710] do_one_initcall+0x250/0x870 [ 633.388970][T28710] do_initcall_level+0x10a/0x1a0 [ 633.394467][T28710] do_initcalls+0x59/0xa0 [ 633.399315][T28710] kernel_init_freeable+0x29d/0x3e0 [ 633.405030][T28710] kernel_init+0x22/0x1d0 [ 633.409872][T28710] ret_from_fork+0x514/0xb70 [ 633.414981][T28710] ret_from_fork_asm+0x1a/0x30 [ 633.420278][T28710] [ 633.420278][T28710] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 633.428086][T28710] __mutex_lock+0x19d/0x1550 [ 633.433188][T28710] elevator_change+0x1af/0x480 [ 633.438464][T28710] elevator_set_none+0xb5/0x140 [ 633.443822][T28710] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 633.450142][T28710] nbd_start_device+0x189/0xb30 [ 633.455501][T28710] nbd_genl_connect+0x167d/0x1cd0 [ 633.461111][T28710] genl_family_rcv_msg_doit+0x233/0x340 [ 633.467225][T28710] genl_rcv_msg+0x614/0x7a0 [ 633.472247][T28710] netlink_rcv_skb+0x226/0x4a0 [ 633.477580][T28710] genl_rcv+0x28/0x40 [ 633.482071][T28710] netlink_unicast+0x7bd/0x940 [ 633.487355][T28710] netlink_sendmsg+0x813/0xb40 [ 633.492631][T28710] sock_sendmsg_nosec+0x13a/0x180 [ 633.498185][T28710] ____sys_sendmsg+0x54e/0x850 [ 633.503481][T28710] ___sys_sendmsg+0x2a5/0x360 [ 633.508682][T28710] __x64_sys_sendmsg+0x1b1/0x290 [ 633.514149][T28710] do_syscall_64+0x166/0x520 [ 633.519266][T28710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.525675][T28710] [ 633.525675][T28710] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 633.534357][T28710] blk_alloc_queue+0x544/0x690 [ 633.539638][T28710] __blk_mq_alloc_disk+0x194/0x390 [ 633.545265][T28710] nbd_dev_add+0x494/0xb60 [ 633.550191][T28710] nbd_init+0x168/0x1f0 [ 633.554888][T28710] do_one_initcall+0x250/0x870 [ 633.560171][T28710] do_initcall_level+0x10a/0x1a0 [ 633.565617][T28710] do_initcalls+0x59/0xa0 [ 633.570459][T28710] kernel_init_freeable+0x29d/0x3e0 [ 633.576168][T28710] kernel_init+0x22/0x1d0 [ 633.581013][T28710] ret_from_fork+0x514/0xb70 [ 633.586137][T28710] ret_from_fork_asm+0x1a/0x30 [ 633.591423][T28710] [ 633.591423][T28710] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 633.598623][T28710] fs_reclaim_acquire+0x71/0x100 [ 633.604113][T28710] kmem_cache_alloc_noprof+0x5f/0x600 [ 633.610002][T28710] __kernfs_iattrs+0xdd/0x380 [ 633.615199][T28710] kernfs_iop_setattr+0xe6/0x3f0 [ 633.620680][T28710] notify_change+0xbba/0xea0 [ 633.625805][T28710] do_truncate+0x1c2/0x250 [ 633.630748][T28710] path_openat+0x15b5/0x1d60 [ 633.635845][T28710] do_file_open+0x23e/0x4a0 [ 633.640856][T28710] do_sys_openat2+0x115/0x200 [ 633.646046][T28710] __x64_sys_openat+0x138/0x170 [ 633.651406][T28710] do_syscall_64+0x166/0x520 [ 633.656505][T28710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.662918][T28710] [ 633.662918][T28710] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 633.671420][T28710] __lock_acquire+0x164c/0x2de0 [ 633.676806][T28710] lock_acquire+0x115/0x350 [ 633.681820][T28710] down_read+0x4a/0x330 [ 633.686547][T28710] kernfs_iop_permission+0x7f/0x430 [ 633.692263][T28710] inode_permission+0x3de/0x5f0 [ 633.697625][T28710] cgroup_attach_permissions+0x28e/0x9f0 [ 633.703763][T28710] __cgroup_procs_write+0x24b/0x320 [ 633.709468][T28710] cgroup_threads_write+0x24/0x50 [ 633.715009][T28710] cgroup_file_write+0x331/0x8f0 [ 633.720475][T28710] kernfs_fop_write_iter+0x3a4/0x540 [ 633.726276][T28710] vfs_write+0x612/0xba0 [ 633.731063][T28710] ksys_write+0x150/0x270 [ 633.735908][T28710] do_syscall_64+0x166/0x520 [ 633.741008][T28710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.747414][T28710] [ 633.747414][T28710] other info that might help us debug this: [ 633.747414][T28710] [ 633.757625][T28710] Chain exists of: [ 633.757625][T28710] &root->kernfs_iattr_rwsem --> sk_lock-AF_INET --> cpu_hotplug_lock [ 633.757625][T28710] [ 633.771674][T28710] Possible unsafe locking scenario: [ 633.771674][T28710] [ 633.779159][T28710] CPU0 CPU1 [ 633.784511][T28710] ---- ---- [ 633.789861][T28710] rlock(cpu_hotplug_lock); [ 633.794460][T28710] lock(sk_lock-AF_INET); [ 633.801406][T28710] lock(cpu_hotplug_lock); [ 633.808417][T28710] rlock(&root->kernfs_iattr_rwsem); [ 633.813778][T28710] [ 633.813778][T28710] *** DEADLOCK *** [ 633.813778][T28710] [ 633.821976][T28710] locks held by syz.3.10810/28710: 5, last CPU#0: [ 633.828437][T28710] #0: ffff8880341c5b30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 633.837515][T28710] #1: ffff888078c36460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 633.846441][T28710] #2: ffff8880599bcc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 633.856189][T28710] #3: ffffffff8ed9c760 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 633.865942][T28710] #4: ffffffff8ebe98f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 633.876474][T28710] [ 633.876474][T28710] stack backtrace: [ 633.882366][T28710] CPU: 0 UID: 0 PID: 28710 Comm: syz.3.10810 Not tainted syzkaller #0 PREEMPT(full) [ 633.891812][T28710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.901884][T28710] Call Trace: [ 633.905159][T28710] [ 633.908201][T28710] dump_stack_lvl+0xe8/0x150 [ 633.912887][T28710] print_circular_bug+0x2e2/0x300 [ 633.917935][T28710] check_noncircular+0x12f/0x150 [ 633.922878][T28710] __lock_acquire+0x164c/0x2de0 [ 633.927728][T28710] ? __lock_acquire+0x747/0x2de0 [ 633.932683][T28710] lock_acquire+0x115/0x350 [ 633.937178][T28710] ? kernfs_iop_permission+0x7f/0x430 [ 633.942548][T28710] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 633.948353][T28710] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 633.954169][T28710] down_read+0x4a/0x330 [ 633.958338][T28710] ? kernfs_iop_permission+0x7f/0x430 [ 633.963723][T28710] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 633.969536][T28710] kernfs_iop_permission+0x7f/0x430 [ 633.974745][T28710] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 633.980554][T28710] inode_permission+0x3de/0x5f0 [ 633.985411][T28710] cgroup_attach_permissions+0x28e/0x9f0 [ 633.991041][T28710] __cgroup_procs_write+0x24b/0x320 [ 633.996238][T28710] cgroup_threads_write+0x24/0x50 [ 634.001262][T28710] ? __pfx_cgroup_threads_write+0x10/0x10 [ 634.006979][T28710] cgroup_file_write+0x331/0x8f0 [ 634.011916][T28710] ? __pfx_cgroup_file_write+0x10/0x10 [ 634.017373][T28710] ? __kmalloc_noprof+0x38c/0x720 [ 634.022499][T28710] ? __pfx_cgroup_file_write+0x10/0x10 [ 634.027965][T28710] kernfs_fop_write_iter+0x3a4/0x540 [ 634.033257][T28710] vfs_write+0x612/0xba0 [ 634.037502][T28710] ? __pfx_vfs_write+0x10/0x10 [ 634.042267][T28710] ? __fget_files+0x2a/0x420 [ 634.046853][T28710] ksys_write+0x150/0x270 [ 634.051177][T28710] ? __pfx_ksys_write+0x10/0x10 [ 634.056028][T28710] do_syscall_64+0x166/0x520 [ 634.060611][T28710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.066666][T28710] ? clear_bhb_loop+0x70/0xc0 [ 634.071338][T28710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.077220][T28710] RIP: 0033:0x7fc90339e159 [ 634.081629][T28710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.101225][T28710] RSP: 002b:00007fc904201028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 634.109706][T28710] RAX: ffffffffffffffda RBX: 00007fc903625fa0 RCX: 00007fc90339e159 [ 634.117667][T28710] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000005 [ 634.125631][T28710] RBP: 00007fc90343503b R08: 0000000000000000 R09: 0000000000000000 [ 634.133589][T28710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.141549][T28710] R13: 00007fc903626038 R14: 00007fc903625fa0 R15: 00007ffd9ee51cb8 [ 634.149520][T28710] [ 634.153170][ C0] net_ratelimit: 18 callbacks suppressed [ 634.153187][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.153611][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.169000][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.554731][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.555411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.192496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.192580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.193665][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.197778][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.232459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.354244][ T25] net_ratelimit: 11 callbacks suppressed [ 639.354265][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.355092][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.313368][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.314052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.393023][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.394295][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.432454][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.435656][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.592872][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.473112][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog