last executing test programs: 5.191236623s ago: executing program 3 (id=2352): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}, {0xfff1, 0x9}}}, 0x24}}, 0x4c050) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000002c0)=@gcm_256={{0x304, 0x36}, "00257059cb008000", "8b3de2aabceef22f419e59f30000000004000000000200", "07350080", "000000d900"}, 0x38) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x220080c1, &(0x7f00000003c0)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r3, &(0x7f0000000480)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) sendmsg$sock(r3, &(0x7f00000005c0)={&(0x7f0000000640)=@nl=@kern={0x10, 0x0, 0x0, 0x1}, 0x80, &(0x7f00000006c0)=[{0x0}, {0x0}], 0x2}, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x401, 0xfffffffb, 0x200, {0x0, 0x0, 0x0, 0x0, 0x8a4a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x4840) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x5e21, @local}], 0x10) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000600)=0x9, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r6, 0x7) listen(r4, 0x7) close(0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0xa, 0xf}, {0xe, 0xfff3}, {0x6, 0x5}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20041006}, 0x20000800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 5.024340185s ago: executing program 0 (id=2354): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) r0 = socket(0x10, 0x803, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r2) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x2, 0xffffffff, 0x1, 0xb16, {0x2, 0x1, 0x1, 0x993, 0xfff7, 0x2}, {0x6, 0x1, 0x1000, 0x3, 0x7, 0x7}, 0x3, 0x3, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0x7, 0x8a0, 0x4, 0x6, 0x8179, 0xc1e, 0x9, 0x0, 0xbb72, 0x80000000, 0x80000001, 0x26a, 0x5, 0x12f2bb8, 0x3, 0xfffffffb, 0xdd, 0x7, 0x8001, 0x4, 0x3, 0x6, 0x472, 0x4, 0x9, 0x3, 0x5f283b39, 0xfffffff8, 0x8, 0x9, 0x5, 0x5, 0x8, 0xbd2, 0x7, 0x7, 0x9, 0xe79, 0x3, 0xfffffff9, 0xb621, 0x2, 0x7c952881, 0x6, 0x1, 0x3, 0x6, 0x7fff, 0x1, 0x2, 0x1, 0x200, 0x7, 0x7, 0x1, 0x47, 0x10000, 0x5, 0x7f, 0x80000001, 0x4, 0x6, 0x0, 0x5, 0x4, 0xffffffff, 0x221d, 0x8001, 0x8, 0x3, 0x3, 0x67, 0xfffffffa, 0x23f, 0x5, 0x0, 0x6, 0x3, 0x8, 0xfffffc01, 0xc39c, 0x14, 0x100, 0x6, 0xe7, 0x4, 0x7, 0x6, 0xa, 0x1, 0x5, 0x2, 0x5, 0x400, 0x4, 0x7, 0x7, 0x2, 0x10000, 0x4, 0xffff, 0x4, 0x5, 0x7, 0x4, 0xfff, 0x1c, 0xe8, 0x2, 0x8, 0x1ff, 0x6, 0x1, 0x4, 0x0, 0x5, 0x6, 0x5, 0xffffff7f, 0x3, 0x7fff, 0x5, 0x5, 0x3694, 0x8a9, 0xffff25f4, 0x1, 0x1, 0x5, 0x5, 0x2, 0xb545, 0x6, 0x0, 0x1ff, 0x1, 0xc99, 0xd, 0x2, 0x5, 0x10, 0x2, 0x7, 0x5, 0xfffffff9, 0xef, 0x7, 0xd, 0x8, 0x7fc0000, 0x4, 0x2, 0x5, 0x7, 0x4, 0x9, 0x4, 0x2, 0xb, 0x5855, 0x9, 0x9, 0x6, 0xff, 0x140000, 0x1, 0xc, 0x0, 0xea, 0x3, 0xaa, 0x8, 0x361, 0x5c, 0x7fffffff, 0xde85, 0xfffffff9, 0x1, 0x2, 0xf, 0xd, 0xfd, 0x80000000, 0x10, 0x1, 0xffff8001, 0x0, 0x9a0, 0x10000, 0x1, 0x4, 0x2, 0xffff7a46, 0x7ff, 0x8, 0x6, 0x5, 0x0, 0xfffffffa, 0x1, 0x5, 0x401, 0x10, 0x1, 0x7, 0x2, 0xffff, 0xfffffff3, 0xffff, 0x80000000, 0x4, 0x9, 0x3, 0x9, 0x2, 0x100, 0x6, 0x3d0, 0x3, 0x81, 0x1, 0x5, 0xfffffff8, 0x2, 0xfff, 0x400, 0x1, 0x9, 0x2c21, 0x3ff, 0x40, 0x8000, 0x80, 0xffff, 0x0, 0x7f, 0x5, 0x101, 0x8, 0x8000, 0x8, 0x9, 0x2, 0x80, 0x6, 0x6, 0x7fffffff, 0x8, 0x80, 0x101, 0x3, 0x0, 0x7, 0x7, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x100, 0x0, 0x1450, 0x2, 0x6, 0x0, 0x5, 0xc17, 0x145ba566, 0x6, 0xc5c4, 0x5, 0x7, 0x800, 0x14dc, 0xfffffffd, 0x4, 0x92, 0x7ff, 0x2, 0x4, 0x2407, 0x504, 0x8, 0x4, 0x7fff, 0x9, 0x4, 0x33a, 0x0, 0x40, 0x9, 0x3, 0x3, 0x200, 0x40, 0xffff, 0x8, 0x8485, 0x1d9, 0xe38, 0xdc6a, 0xb30, 0x920, 0x5, 0x100, 0x8, 0x2, 0x2, 0x7ff, 0x99, 0x8, 0x4, 0x0, 0x4, 0xffff, 0x0, 0x6, 0x6, 0x2, 0x5, 0x8, 0x2, 0x70000, 0x207, 0x0, 0x1ff, 0x0, 0x7, 0x1000, 0x9, 0x200, 0x6bfe, 0xe, 0x1, 0x5, 0x9, 0x0, 0x2, 0x7d, 0x552, 0x54, 0x4, 0x8, 0x10000, 0x0, 0x800, 0x1, 0x5, 0x5, 0x7, 0x4, 0x3, 0x7, 0xd94, 0x3, 0x2, 0x10000, 0x7f, 0x7fff, 0xa9, 0xb08, 0x200, 0x5, 0x8, 0x6, 0x2, 0x9, 0xfffffffd, 0x6, 0x5, 0x9, 0x800, 0x9, 0x5, 0x7, 0x8ed, 0x0, 0x2, 0x80000000, 0xe468, 0x8001, 0x4c4f, 0x2, 0xf9, 0x7, 0x0, 0x100, 0xffffffff, 0xc, 0x8, 0x1, 0x1, 0x6f, 0x0, 0x101, 0x1ff, 0x5, 0x1, 0x9, 0x1, 0x7, 0x7fffffff, 0x1, 0x33, 0x6, 0x5c, 0x3, 0xfffffff8, 0x3ff, 0x81, 0xaf1b, 0x4, 0x8000, 0x10, 0xfffffc01, 0xfd1e, 0xfffffffb, 0x3, 0x167, 0x1, 0xff, 0x3, 0x6, 0x3, 0x2, 0x0, 0xf981, 0x7, 0x7fff, 0x6, 0x3, 0x7, 0x3ff, 0x1, 0xffffffd7, 0xd, 0x9, 0x4, 0xe38c, 0x6, 0x3ff, 0x8, 0x2, 0x2, 0xb, 0x7, 0x0, 0x9, 0x9, 0xa7b, 0x0, 0x8, 0xc, 0x6, 0x5, 0x10001, 0x7fff, 0x0, 0xb, 0x9, 0xfd4f, 0x0, 0x1ff, 0x6, 0xffffffef, 0x9, 0x6, 0xf, 0x6, 0x100, 0x80000, 0x4, 0x9, 0xc, 0x1, 0x4, 0x7, 0x8001, 0x9, 0xaa2, 0x1, 0x8, 0x10, 0x5, 0xa32, 0xffff8001, 0x3, 0xff, 0x8, 0xfffffff7, 0x2, 0x0, 0x4, 0xa, 0x9, 0xa, 0x0, 0xffff, 0x2, 0xfffffff8, 0xf, 0x6, 0xffff, 0x5, 0x0, 0xbf7, 0x6, 0x7, 0x7, 0x5a6, 0x8, 0x6, 0xff, 0x4]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x90}, 0x8080) (async) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000dc0), 0x56) (async, rerun: 32) sendmsg$kcm(r7, &(0x7f0000000e00)={&(0x7f0000000e40)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r9, r11, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}) (async) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r12, 0x4) 4.199998318s ago: executing program 1 (id=2361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001800)={'\x00', 0x1}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) 4.039998872s ago: executing program 4 (id=2363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0004050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580090001006d657461000000000c00028008000240000000000800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 3.911744658s ago: executing program 4 (id=2364): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000e40)={0x5, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x10}}, {{0xa, 0x0, 0x0, @remote, 0x7}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000f80)={0x0, {{0xa, 0x4e28, 0x20, @mcast1={0xff, 0x7}}}, {{0xa, 0x4000, 0xffffffff, @loopback, 0x10000}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000010c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) 3.824783713s ago: executing program 4 (id=2365): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x1, 0x8, '\x00', 0x0, 0x0}, 0x50) close(0x3) close(0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x6b}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 3.717685848s ago: executing program 4 (id=2366): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x12, 0xac14140c}, 0x60000000}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) 3.612415938s ago: executing program 4 (id=2367): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) 3.121975532s ago: executing program 2 (id=2371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "8621"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) 3.033321671s ago: executing program 2 (id=2372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001a80), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040) 899.351841ms ago: executing program 0 (id=2373): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000640)="a7", 0xffe0, 0x48d8, &(0x7f0000000680)={0xa, 0x4e24, 0x7, @loopback, 0xe5f}, 0x1c) 899.049121ms ago: executing program 3 (id=2374): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000e40)={'netdevsim0\x00', &(0x7f0000000e80)=@ethtool_flash={0x33, 0x10001, './file1/../file0\x00'}}) 898.836483ms ago: executing program 1 (id=2375): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002840)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd2c, 0x10000002, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x50}}]}, 0x34}}, 0x4812) 883.557825ms ago: executing program 2 (id=2376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00010000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 850.166457ms ago: executing program 4 (id=2377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000001040)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001080), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r0, 0x0) recvfrom$inet(r0, &(0x7f00000010c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 699.365243ms ago: executing program 1 (id=2378): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000180)}, 0x0) 688.063755ms ago: executing program 0 (id=2379): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0900000004000000e25f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xa, 0x17, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000097090100000002816500feff0000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000001100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 671.728336ms ago: executing program 2 (id=2380): bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x6, 0x7, &(0x7f0000001100)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000001200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 623.967864ms ago: executing program 3 (id=2381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xb, 0xffff}, {0x300, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="03031b0030003200060063"], 0x76) 581.421288ms ago: executing program 1 (id=2382): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) unshare(0x20040600) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) pselect6(0x900, 0x0, 0x0, &(0x7f0000000800)={0x1f}, &(0x7f0000000840)={0x0, 0x3938700}, 0x0) 519.482327ms ago: executing program 2 (id=2383): unshare(0x22020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'netdevsim0\x00', &(0x7f0000000340)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8020ffa1}, {0xfffffff9, 0x80500}]}}) 448.951491ms ago: executing program 0 (id=2384): r0 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r0) 314.961583ms ago: executing program 1 (id=2385): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000010340)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000010380)={'veth0\x00'}) sendmsg$nl_route(r0, &(0x7f0000010540)={0x0, 0x0, &(0x7f0000010580)={&(0x7f00000105c0)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r2, @ANYBLOB="140002"], 0x34}}, 0x0) 314.785789ms ago: executing program 3 (id=2386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x8, 0x7, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5, r0, 0x20}, 0x38) 314.654234ms ago: executing program 0 (id=2387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0x70, 0x30, 0x10d, 0x70bd2d, 0x25dfdbfd, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0xfffffc74, 0xffffffffffffffff, 0x6d, 0x401}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x107}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x44089}, 0x2400c800) 190.76689ms ago: executing program 3 (id=2388): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000500)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x6a}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 123.772726ms ago: executing program 2 (id=2389): r0 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x2, 0x6, 0x588, 0x3e8, 0x3e8, 0x200, 0x3e8, 0x200, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x6, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {}, 0x222}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00, 0x0, 0xff], '\x00', 'bond_slave_0\x00', {}, {0xff}, 0x4}, 0x0, 0xf0, 0x118, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x5a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xa}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffff00, 0xffff00, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xff, 0xff], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 83.476456ms ago: executing program 0 (id=2390): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004801}, 0x800) 184.58µs ago: executing program 1 (id=2391): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000b40)="00f589e0be8c68984368c18cb1a51792edfc64ebcd10f08d4ad201ca72131f9de2adbe7c0ee658d73b468667e360af95484d7e09b9003e882e6ca383ef0eebd756ead670a8c525", 0xfceb) 0s ago: executing program 3 (id=2392): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xffffbf83, @dev={0xfe, 0x80, '\x00', 0xc6}, 0x9, 0x1}, 0x20) kernel console output (not intermixed with test programs): 0203] batadv_slave_0: entered promiscuous mode [ 238.991179][T10203] batadv_slave_0: entered allmulticast mode [ 238.999484][T10203] veth1_to_batadv: entered promiscuous mode [ 238.999510][T10203] veth1_to_batadv: entered allmulticast mode [ 239.003815][T10208] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20002 [ 239.009599][T10203] batadv_slave_1: entered promiscuous mode [ 239.009623][T10203] batadv_slave_1: entered allmulticast mode [ 239.010831][T10203] xfrm0: entered promiscuous mode [ 239.010849][T10203] xfrm0: entered allmulticast mode [ 239.037410][T10203] veth0_to_hsr: entered promiscuous mode [ 239.037438][T10203] veth0_to_hsr: entered allmulticast mode [ 239.038451][T10203] hsr_slave_0: entered allmulticast mode [ 239.063234][T10203] veth1_to_hsr: entered promiscuous mode [ 239.063262][T10203] veth1_to_hsr: entered allmulticast mode [ 239.068646][T10203] hsr_slave_1: entered allmulticast mode [ 239.080117][T10203] hsr0: entered promiscuous mode [ 239.080146][T10203] hsr0: entered allmulticast mode [ 239.084414][T10203] veth1_virt_wifi: entered promiscuous mode [ 239.084438][T10203] veth1_virt_wifi: entered allmulticast mode [ 239.098948][T10203] veth0_virt_wifi: entered promiscuous mode [ 239.098972][T10203] veth0_virt_wifi: entered allmulticast mode [ 239.103821][T10203] virt_wifi0: entered promiscuous mode [ 239.103850][T10203] virt_wifi0: entered allmulticast mode [ 239.246646][T10204] netlink: 'syz.3.922': attribute type 9 has an invalid length. [ 239.246670][T10204] netlink: 'syz.3.922': attribute type 4 has an invalid length. [ 239.380717][T10212] netlink: 'syz.2.925': attribute type 2 has an invalid length. [ 239.418568][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 239.432321][T10214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.926'. [ 239.802468][T10240] netlink: 'syz.2.929': attribute type 11 has an invalid length. [ 239.865197][ T5865] net_ratelimit: 34 callbacks suppressed [ 239.865217][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.937615][ T240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.031378][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 240.176180][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.257045][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.735591][ T5865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.736482][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 240.821913][T10273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.939'. [ 240.841736][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.841876][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.841984][T10270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.027175][T10281] 8021q: adding VLAN 0 to HW filter on device bond9 [ 241.030249][T10281] bridge0: port 3(bond9) entered blocking state [ 241.030427][T10281] bridge0: port 3(bond9) entered disabled state [ 241.030595][T10281] bond9: entered allmulticast mode [ 241.053515][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.063452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.086733][T10281] bond9: entered promiscuous mode [ 241.087317][T10281] bridge0: port 3(bond9) entered blocking state [ 241.087532][T10281] bridge0: port 3(bond9) entered forwarding state [ 241.188071][T10288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.942'. [ 241.236092][T10285] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20003 [ 241.331755][T10297] x_tables: duplicate entry at hook 1 [ 241.533839][ T13] bridge0: port 3(bond9) entered disabled state [ 241.753409][T10301] udevd[10301]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 241.761082][T10301] udevd[10301]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 241.901565][T10314] netlink: 32 bytes leftover after parsing attributes in process `syz.0.945'. [ 241.902667][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.945'. [ 241.902706][T10314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.945'. [ 242.621553][T10304] team0: No ports can be present during mode change [ 242.747795][T10326] netlink: 36 bytes leftover after parsing attributes in process `syz.4.948'. [ 242.749690][T10326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.948'. [ 242.850934][T10324] Bluetooth: hci0: unsupported parameter 5135 [ 242.850960][T10324] Bluetooth: hci0: unsupported parameter 8192 [ 242.850982][T10324] Bluetooth: hci0: unsupported parameter 5135 [ 242.850993][T10324] Bluetooth: hci0: unsupported parameter 8192 [ 242.882540][T10324] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.946366][T10334] netlink: 'syz.4.951': attribute type 7 has an invalid length. [ 242.946388][T10334] netlink: 'syz.4.951': attribute type 3 has an invalid length. [ 242.946398][T10334] netlink: 224 bytes leftover after parsing attributes in process `syz.4.951'. [ 243.014579][T10338] netlink: 'syz.4.951': attribute type 7 has an invalid length. [ 243.014601][T10338] netlink: 'syz.4.951': attribute type 3 has an invalid length. [ 243.014612][T10338] netlink: 224 bytes leftover after parsing attributes in process `syz.4.951'. [ 243.149986][T10348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 243.201098][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.954'. [ 243.258784][T10355] netlink: 24 bytes leftover after parsing attributes in process `syz.2.957'. [ 243.264056][T10355] netlink: 'syz.2.957': attribute type 1 has an invalid length. [ 243.573164][T10366] netlink: 'syz.1.961': attribute type 1 has an invalid length. [ 243.860106][T10381] x_tables: unsorted entry at hook 3 [ 244.293104][T10409] Bluetooth: hci0: unsupported parameter 5135 [ 244.293128][T10409] Bluetooth: hci0: unsupported parameter 8192 [ 244.293139][T10409] Bluetooth: hci0: unsupported parameter 5135 [ 244.293148][T10409] Bluetooth: hci0: unsupported parameter 8192 [ 244.995938][T10424] syzkaller1: entered promiscuous mode [ 244.995960][T10424] syzkaller1: entered allmulticast mode [ 245.088925][T10429] veth4: entered allmulticast mode [ 245.355476][T10438] netlink: 'syz.4.981': attribute type 1 has an invalid length. [ 245.455779][ T30] net_ratelimit: 125 callbacks suppressed [ 245.455801][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.456019][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.507073][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.511771][T10452] netlink: 'syz.3.985': attribute type 1 has an invalid length. [ 245.613127][T10456] netlink: del zone limit has 4 unknown bytes [ 245.782471][ T144] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.782503][ T144] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.782522][ T144] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 55428 - 0 [ 246.036816][T10473] x_tables: duplicate underflow at hook 1 [ 246.191028][T10476] syzkaller1: entered promiscuous mode [ 246.191053][T10476] syzkaller1: entered allmulticast mode [ 246.258494][T10480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.258638][T10480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.258741][T10480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.260808][T10480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.260961][T10480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.261073][T10480] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.190975][T10519] __nla_validate_parse: 8 callbacks suppressed [ 249.190997][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1000'. [ 249.191121][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1000'. [ 249.536108][T10534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 249.609192][T10534] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.611358][T10536] team_slave_0: entered allmulticast mode [ 249.696469][T10539] bond5: (slave batadv1): Opening slave failed [ 249.999442][T10547] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1003'. [ 250.231667][T10558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1010'. [ 250.231707][T10558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'. [ 250.358978][T10561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1011'. [ 250.390799][T10561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1011'. [ 250.391634][T10566] netlink: 'syz.2.1013': attribute type 6 has an invalid length. [ 250.434508][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1013'. [ 250.655623][ T5772] net_ratelimit: 27 callbacks suppressed [ 250.655642][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.658131][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.817879][T10595] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1019'. [ 251.085831][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.111508][T10602] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.111550][T10602] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.309649][T10602] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.309708][T10602] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.532949][T10602] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.532994][T10602] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.639985][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.673020][T10602] netdevsim netdevsim0 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.673058][T10602] netdevsim netdevsim0 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.696893][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.697775][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.870771][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.885389][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.904769][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.904805][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.904839][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.904860][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.045118][ T38] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.045155][ T38] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.219095][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.416788][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.735599][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.735806][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.959701][T10697] syzkaller0: left promiscuous mode [ 252.959726][T10697] syzkaller0: left allmulticast mode [ 255.855515][ T5636] net_ratelimit: 11 callbacks suppressed [ 255.855530][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.855668][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.018366][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.048912][T10748] __nla_validate_parse: 8 callbacks suppressed [ 256.048931][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1051'. [ 256.080909][T10736] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 256.203171][T10748] bond4: option broadcast_neighbor: invalid value (4) [ 256.236447][T10748] bond4 (unregistering): Released all slaves [ 256.535303][ T5866] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.599032][T10771] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1055'. [ 256.656764][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.695459][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.755388][ T5866] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 256.887144][T10783] netlink: 'syz.2.1060': attribute type 1 has an invalid length. [ 256.888145][T10787] netlink: 'syz.1.1061': attribute type 2 has an invalid length. [ 256.892322][T10788] netlink: zone id is out of range [ 256.895676][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.895845][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.950654][T10792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.952705][T10792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.040397][T10799] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1064'. [ 257.067365][T10787] : entered promiscuous mode [ 257.191481][T10807] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1062'. [ 257.212993][T10783] veth3: entered allmulticast mode [ 257.276331][T10794] bond6: (slave veth0_to_bond): making interface the new active one [ 257.283923][T10794] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 257.330120][T10795] syzkaller1: entered promiscuous mode [ 257.330147][T10795] syzkaller1: entered allmulticast mode [ 257.580562][T10826] Unsupported ieee802154 address type: 0 [ 257.673925][T10831] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 257.696016][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.751199][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1074'. [ 257.786458][T10837] sctp: [Deprecated]: syz.2.1070 (pid 10837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.786458][T10837] Use struct sctp_sack_info instead [ 257.881692][T10840] vlan2: entered allmulticast mode [ 257.882662][T10840] batman_adv: batadv0: Adding interface: vlan2 [ 257.882715][T10840] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.882762][T10840] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 257.901549][ T144] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.901826][ T144] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 257.961180][T10845] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1076'. [ 258.082396][T10853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1078'. [ 258.127716][T10853] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1078'. [ 258.239024][T10863] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 258.239047][T10863] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1085'. [ 258.239062][T10863] nbd: must specify at least one socket [ 258.255762][ T5772] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 258.267836][T10861] x_tables: duplicate underflow at hook 1 [ 258.296636][T10863] syzkaller0: entered promiscuous mode [ 258.296657][T10863] syzkaller0: entered allmulticast mode [ 258.369598][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1085'. [ 258.558753][T10879] pim6reg1: entered promiscuous mode [ 258.558779][T10879] pim6reg1: entered allmulticast mode [ 259.163615][T10903] bridge0: port 3(veth0) entered disabled state [ 259.164323][T10903] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.164929][T10903] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.512880][T10903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.527698][T10903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.699838][T10903] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 259.737572][T10903] vlan1: left allmulticast mode [ 259.737598][T10903] veth0_vlan: left allmulticast mode [ 259.789540][T10903] batman_adv: batadv0: Interface deactivated: ip6gretap0 [ 260.369349][T10915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.405613][T10915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.826203][ T13] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.826263][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.826301][ T13] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.826323][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.826356][ T13] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.826379][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.826411][ T13] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.826435][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.084121][T10973] __nla_validate_parse: 69 callbacks suppressed [ 261.084135][T10973] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1103'. [ 261.225708][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 261.296492][ T5772] net_ratelimit: 16 callbacks suppressed [ 261.296515][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.630836][T11021] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1113'. [ 261.858467][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.998045][T11033] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1117'. [ 262.045752][T11029] netlink: 'syz.2.1116': attribute type 16 has an invalid length. [ 262.045777][T11029] netlink: 'syz.2.1116': attribute type 3 has an invalid length. [ 262.045790][T11029] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.1116'. [ 262.049446][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 262.335787][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.361880][T11033] veth0_macvtap: left promiscuous mode [ 262.736299][T11061] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1122'. [ 262.812557][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1125'. [ 262.970668][T11074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1125'. [ 263.089322][T11074] veth3: entered allmulticast mode [ 263.152814][T11082] tc_dump_action: action bad kind [ 263.300401][T10942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.337601][T11104] pim6reg: entered allmulticast mode [ 263.378519][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.608807][T11120] netlink: 'syz.1.1131': attribute type 29 has an invalid length. [ 263.941006][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.943689][ T38] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.954426][T10942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.972493][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.099737][T11140] netlink: 'syz.1.1138': attribute type 83 has an invalid length. [ 264.418228][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.423586][T11153] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1142'. [ 264.692121][T11167] tap0: tun_chr_ioctl cmd 21731 [ 265.131930][T11198] netlink: 'syz.4.1155': attribute type 10 has an invalid length. [ 265.238491][T11208] x_tables: duplicate underflow at hook 1 [ 265.357873][T11215] netlink: 'syz.3.1157': attribute type 1 has an invalid length. [ 265.399919][ T12] bond0: (slave bond_slave_0): interface is now down [ 265.399947][ T12] bond0: (slave bond_slave_1): interface is now down [ 265.399955][ T12] bond0: (slave bridge0): interface is now down [ 265.399964][ T12] bond0: (slave veth0_to_bond): interface is now down [ 265.410951][T11207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.419676][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa6f800: rx timeout, send abort [ 265.428900][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807aa6f800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 265.554214][T11218] 8021q: adding VLAN 0 to HW filter on device bond9 [ 265.565875][T11218] bond8: (slave bond9): making interface the new active one [ 265.573858][T11218] bond8: (slave bond9): Enslaving as an active interface with an up link [ 265.811396][T11238] netlink: 'syz.0.1165': attribute type 1 has an invalid length. [ 265.882036][T11238] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.121140][T11257] tipc: Enabled bearer , priority 10 [ 266.122890][T11257] __nla_validate_parse: 8 callbacks suppressed [ 266.122908][T11257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1169'. [ 266.126364][T11257] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 266.243274][T11257] bond4: entered promiscuous mode [ 266.247733][T11257] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.271338][T11257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1169'. [ 266.366287][T11269] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1173'. [ 266.430800][T11279] netlink: 'syz.2.1173': attribute type 1 has an invalid length. [ 266.496298][ T29] net_ratelimit: 2 callbacks suppressed [ 266.496320][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.559903][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 266.560409][T11285] netlink: 'syz.2.1176': attribute type 2 has an invalid length. [ 266.772975][T11292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.138075][ T5866] tipc: Node number set to 4032922990 [ 267.535620][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.601240][T11301] syzkaller1: entered promiscuous mode [ 267.601265][T11301] syzkaller1: entered allmulticast mode [ 267.936146][ T38] bond0: (slave bond_slave_0): interface is now down [ 267.936178][ T38] bond0: (slave bond_slave_1): interface is now down [ 267.936188][ T38] bond0: (slave bridge0): interface is now down [ 267.936199][ T38] bond0: (slave veth0_to_bond): interface is now down [ 267.937171][T10942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.943156][ T38] bond0: now running without any active interface! [ 268.126744][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'. [ 268.531081][T11329] veth2: entered promiscuous mode [ 268.575785][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.722050][T11340] syzkaller0: entered promiscuous mode [ 268.722074][T11340] syzkaller0: entered allmulticast mode [ 268.739338][T11340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1192'. [ 268.743432][T11340] ip6tnl2: entered promiscuous mode [ 269.402110][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1202'. [ 269.472278][T11389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.492736][T11392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1202'. [ 269.623538][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.844597][T11415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1210'. [ 269.863822][T11414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1210'. [ 270.268052][T11427] xt_CT: No such helper "netbios-ns" [ 270.358930][T11443] netlink: zone id is out of range [ 270.358946][T11443] netlink: set zone limit has 4 unknown bytes [ 270.453674][T11448] netlink: 'syz.3.1220': attribute type 1 has an invalid length. [ 270.478593][T11454] netlink: 'syz.4.1219': attribute type 21 has an invalid length. [ 270.541663][T11448] bond10: entered promiscuous mode [ 270.543676][T11448] 8021q: adding VLAN 0 to HW filter on device bond10 [ 270.583173][T11455] bond10: entered allmulticast mode [ 270.606851][T11451] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 270.657935][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.709173][T11448] bond10: (slave bridge16): making interface the new active one [ 270.709198][T11448] bridge16: entered promiscuous mode [ 270.713433][T11448] bridge16: entered allmulticast mode [ 270.732299][T11448] bond10: (slave bridge16): Enslaving as an active interface with an up link [ 271.198900][T11478] __nla_validate_parse: 5 callbacks suppressed [ 271.198923][T11478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 271.198946][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1229'. [ 271.430412][T11498] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1237'. [ 271.431952][T11495] netlink: 'syz.3.1235': attribute type 3 has an invalid length. [ 271.453139][T11505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1236'. [ 271.453165][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 271.656233][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1236'. [ 271.695713][ T5636] net_ratelimit: 1 callbacks suppressed [ 271.695734][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.933188][T11079] udevd[11079]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 271.969219][T11519] udevd[11519]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 272.062208][T11525] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1240'. [ 272.277319][T11557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 272.507943][T11572] ip6gre1: entered allmulticast mode [ 272.619919][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1252'. [ 272.726752][T11581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1253'. [ 272.744140][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.524020][T11604] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 273.538078][T10942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.728318][T11611] netlink: 'syz.1.1260': attribute type 10 has an invalid length. [ 273.763980][T11615] vti0: entered promiscuous mode [ 273.764005][T11615] vti0: entered allmulticast mode [ 273.776334][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.869559][T11622] netlink: 'syz.1.1260': attribute type 4 has an invalid length. [ 274.017128][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.400056][T11640] lo: entered promiscuous mode [ 274.400074][T11640] lo: entered allmulticast mode [ 274.401018][T11640] tunl0: entered promiscuous mode [ 274.401036][T11640] tunl0: entered allmulticast mode [ 274.401825][T11640] gre0: entered promiscuous mode [ 274.401835][T11640] gre0: entered allmulticast mode [ 274.402411][T11640] gretap0: left promiscuous mode [ 274.402424][T11640] gretap0: entered promiscuous mode [ 274.402432][T11640] gretap0: entered allmulticast mode [ 274.404121][T11640] erspan0: entered promiscuous mode [ 274.404132][T11640] erspan0: entered allmulticast mode [ 274.455881][T11640] ip_vti0: entered promiscuous mode [ 274.455904][T11640] ip_vti0: entered allmulticast mode [ 274.457178][T11640] ip6_vti0: entered promiscuous mode [ 274.457194][T11640] ip6_vti0: entered allmulticast mode [ 274.458207][T11640] sit0: entered promiscuous mode [ 274.458222][T11640] sit0: entered allmulticast mode [ 274.459402][T11640] ip6tnl0: entered promiscuous mode [ 274.459418][T11640] ip6tnl0: entered allmulticast mode [ 274.460866][T11640] ip6gre0: entered promiscuous mode [ 274.460881][T11640] ip6gre0: entered allmulticast mode [ 274.462011][T11640] ip6gretap0: entered promiscuous mode [ 274.462027][T11640] ip6gretap0: entered allmulticast mode [ 274.463664][T11640] bridge0: entered promiscuous mode [ 274.463682][T11640] bridge0: entered allmulticast mode [ 274.466441][T11640] vcan0: entered promiscuous mode [ 274.466458][T11640] vcan0: entered allmulticast mode [ 274.470878][T11640] bond0: entered promiscuous mode [ 274.470903][T11640] bond_slave_0: entered promiscuous mode [ 274.471093][T11640] bond_slave_1: entered promiscuous mode [ 274.471367][T11640] bond0: entered allmulticast mode [ 274.471381][T11640] bond_slave_0: entered allmulticast mode [ 274.471395][T11640] bond_slave_1: entered allmulticast mode [ 274.472868][T11640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.474235][T11640] team0: entered promiscuous mode [ 274.474253][T11640] team_slave_0: entered promiscuous mode [ 274.474429][T11640] team_slave_1: entered promiscuous mode [ 274.477070][T11640] team0: entered allmulticast mode [ 274.477090][T11640] team_slave_0: entered allmulticast mode [ 274.477104][T11640] team_slave_1: entered allmulticast mode [ 274.479653][T11640] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.481091][T11640] nlmon0: entered promiscuous mode [ 274.481210][T11640] nlmon0: entered allmulticast mode [ 274.482577][T11640] batadv0: left promiscuous mode [ 274.482597][T11640] batadv0: entered promiscuous mode [ 274.482610][T11640] batadv0: entered allmulticast mode [ 274.483690][T11640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.485846][T11640] vxcan0: entered promiscuous mode [ 274.485863][T11640] vxcan0: entered allmulticast mode [ 274.487057][T11640] vxcan1: entered promiscuous mode [ 274.487073][T11640] vxcan1: entered allmulticast mode [ 274.489555][T11640] veth0: entered promiscuous mode [ 274.489575][T11640] veth0: entered allmulticast mode [ 274.491125][T11640] veth1: entered promiscuous mode [ 274.491143][T11640] veth1: entered allmulticast mode [ 274.500096][T11640] wg0: entered promiscuous mode [ 274.500120][T11640] wg0: entered allmulticast mode [ 274.520044][T11640] wg1: entered promiscuous mode [ 274.521594][T11640] wg1: entered allmulticast mode [ 274.531156][T11640] wg2: entered promiscuous mode [ 274.531313][T11640] wg2: entered allmulticast mode [ 274.542652][T11640] veth0_to_bridge: entered promiscuous mode [ 274.542683][T11640] veth0_to_bridge: entered allmulticast mode [ 274.558378][T11640] veth1_to_bridge: entered promiscuous mode [ 274.558403][T11640] veth1_to_bridge: entered allmulticast mode [ 274.581458][T11640] veth0_to_bond: entered promiscuous mode [ 274.581483][T11640] veth0_to_bond: entered allmulticast mode [ 274.596850][T11640] veth1_to_bond: entered promiscuous mode [ 274.596875][T11640] veth1_to_bond: entered allmulticast mode [ 274.606234][T11640] veth0_to_team: entered promiscuous mode [ 274.606255][T11640] veth0_to_team: entered allmulticast mode [ 274.623918][T11640] veth1_to_team: entered promiscuous mode [ 274.623940][T11640] veth1_to_team: entered allmulticast mode [ 274.636620][T11640] veth0_to_batadv: entered promiscuous mode [ 274.636641][T11640] veth0_to_batadv: entered allmulticast mode [ 274.647034][T11640] batadv_slave_0: entered promiscuous mode [ 274.647494][T11640] batadv_slave_0: entered allmulticast mode [ 274.650228][T11640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.650561][T11640] veth1_to_batadv: entered promiscuous mode [ 274.650578][T11640] veth1_to_batadv: entered allmulticast mode [ 274.659076][T11640] batadv_slave_1: entered promiscuous mode [ 274.659097][T11640] batadv_slave_1: entered allmulticast mode [ 274.662264][T11640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.662581][T11640] xfrm0: entered promiscuous mode [ 274.662597][T11640] xfrm0: entered allmulticast mode [ 274.673977][T11640] veth0_to_hsr: entered promiscuous mode [ 274.674002][T11640] veth0_to_hsr: entered allmulticast mode [ 274.688586][T11640] hsr_slave_0: entered allmulticast mode [ 274.690736][T11640] veth1_to_hsr: entered promiscuous mode [ 274.690756][T11640] veth1_to_hsr: entered allmulticast mode [ 274.693807][T11640] hsr_slave_1: entered allmulticast mode [ 274.697331][T11640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.697352][T11640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.697407][T11640] hsr0: entered promiscuous mode [ 274.697420][T11640] hsr0: entered allmulticast mode [ 274.701278][T11640] veth1_virt_wifi: entered promiscuous mode [ 274.701296][T11640] veth1_virt_wifi: entered allmulticast mode [ 274.704213][T11640] veth0_virt_wifi: entered promiscuous mode [ 274.704231][T11640] veth0_virt_wifi: entered allmulticast mode [ 274.709657][T11640] virt_wifi0: entered promiscuous mode [ 274.709676][T11640] virt_wifi0: entered allmulticast mode [ 274.709772][T11640] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 274.816147][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.829749][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.829853][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.846109][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.846215][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.710175][T11696] netlink: zone id is out of range [ 275.710194][T11696] netlink: zone id is out of range [ 275.710279][T11696] netlink: zone id is out of range [ 275.944402][T11708] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 275.955746][T11706] syzkaller0: entered promiscuous mode [ 275.955769][T11706] syzkaller0: entered allmulticast mode [ 275.977957][T11706] batman_adv: batadv0: Interface activated: syzkaller0 [ 275.995656][ T65] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.995703][ T65] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.995732][ T65] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.995762][ T65] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.207338][T11715] syzkaller1: entered promiscuous mode [ 276.207367][T11715] syzkaller1: entered allmulticast mode [ 276.229607][T11715] __nla_validate_parse: 11 callbacks suppressed [ 276.230599][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 276.232115][T11715] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 276.451895][T11723] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1294'. [ 276.454047][T11723] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1294'. [ 276.454071][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1294'. [ 276.811319][T11729] net_ratelimit: 7 callbacks suppressed [ 276.811345][T11729] ip_tables: iptables: counters copy to user failed while replacing table [ 276.896980][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.008719][T11737] netlink: 'syz.2.1299': attribute type 21 has an invalid length. [ 277.056617][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.161573][T11755] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1305'. [ 277.161776][T11755] 0·: renamed from hsr0 (while UP) [ 277.181658][T11755] 0·: entered allmulticast mode [ 277.181683][T11755] hsr_slave_0: entered allmulticast mode [ 277.181700][T11755] hsr_slave_1: entered allmulticast mode [ 277.182234][T11755] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 277.231859][T11760] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1304'. [ 277.384443][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1309'. [ 277.586515][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1314'. [ 277.586614][T11790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1314'. [ 277.611422][T11786] netlink: 2136 bytes leftover after parsing attributes in process `syz.1.1313'. [ 277.935993][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.146996][T11820] netlink: 'syz.2.1322': attribute type 4 has an invalid length. [ 278.399962][T11830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.400761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.548506][T11844] bond0: (slave gretap0): Opening slave failed [ 278.713391][T11851] sctp: [Deprecated]: syz.4.1332 (pid 11851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 278.713391][T11851] Use struct sctp_sack_info instead [ 278.979382][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.030236][T11855] Bluetooth: MGMT ver 1.23 [ 279.222528][T11867] netlink: 'syz.2.1337': attribute type 41 has an invalid length. [ 279.223608][T11869] sock: sock_timestamping_bind_phc: sock not bind to device [ 279.268633][T11867] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.293624][T11867] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.330719][T11867] bond6: (slave veth0_to_bond): Releasing active interface [ 279.371186][T11867] bond0: (slave bond_slave_0): Releasing backup interface [ 279.414057][T11867] bond0: (slave bond_slave_1): Releasing backup interface [ 279.468422][T11867] team0: Port device team_slave_0 removed [ 279.499786][T11867] team0: Port device team_slave_1 removed [ 279.510794][T11867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.510820][T11867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.530247][T11867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.532427][T11867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.557457][T11867] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 279.952392][T11886] xt_CT: No such helper "netbios-ns" [ 280.015726][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.005839][T11938] vlan0: entered promiscuous mode [ 281.350805][T11951] tipc: Failed to remove unknown binding: 66,0,0/0:259215773/259215775 [ 281.350839][T11951] tipc: Failed to remove unknown binding: 66,0,0/0:259215773/259215774 [ 281.353541][T11951] __nla_validate_parse: 8 callbacks suppressed [ 281.353561][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 281.393025][T11951] tipc: Failed to remove unknown binding: 66,0,0/0:259215773/259215775 [ 281.393057][T11951] tipc: Failed to remove unknown binding: 66,0,0/0:259215773/259215774 [ 281.719103][T11975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1367'. [ 281.722873][T11975] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1367'. [ 281.746934][T11975] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1367'. [ 281.771931][T11978] tipc: Started in network mode [ 281.771962][T11978] tipc: Node identity ac1414aa, cluster identity 4711 [ 281.773375][T11978] tipc: Enabled bearer , priority 10 [ 281.982772][T11988] netlink: 'syz.3.1371': attribute type 11 has an invalid length. [ 281.989948][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 281.989977][T11986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1369'. [ 281.989994][T11986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 282.010420][T11984] syzkaller0: entered promiscuous mode [ 282.010450][T11984] syzkaller0: entered allmulticast mode [ 282.101343][ T30] net_ratelimit: 3 callbacks suppressed [ 282.101364][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.102040][ T161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.102709][ T5636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.103295][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.615564][T12020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1379'. [ 282.862824][T12027] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.863144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.888176][T10942] tipc: Node number set to 2886997162 [ 282.901886][T12029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1382'. [ 283.135685][T10942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.135773][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.135974][T10942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.277808][T12035] lo: left promiscuous mode [ 283.277834][T12035] lo: left allmulticast mode [ 283.313169][T12035] tunl0: left promiscuous mode [ 283.314852][T12035] tunl0: left allmulticast mode [ 283.349297][T12035] gre0: left promiscuous mode [ 283.349320][T12035] gre0: left allmulticast mode [ 283.369771][T12035] gretap0: left promiscuous mode [ 283.369794][T12035] gretap0: left allmulticast mode [ 283.390826][T12035] erspan0: left promiscuous mode [ 283.390850][T12035] erspan0: left allmulticast mode [ 283.391717][T12035] ip_vti0: left promiscuous mode [ 283.391735][T12035] ip_vti0: left allmulticast mode [ 283.392499][T12035] ip6_vti0: left promiscuous mode [ 283.392513][T12035] ip6_vti0: left allmulticast mode [ 283.413761][T12035] sit0: left promiscuous mode [ 283.413783][T12035] sit0: left allmulticast mode [ 283.434436][T12035] ip6tnl0: left promiscuous mode [ 283.434466][T12035] ip6tnl0: left allmulticast mode [ 283.456711][T12035] ip6gre0: left promiscuous mode [ 283.456735][T12035] ip6gre0: left allmulticast mode [ 283.482720][T12035] ip6gretap0: left promiscuous mode [ 283.482746][T12035] ip6gretap0: left allmulticast mode [ 283.488985][T12035] bridge0: left promiscuous mode [ 283.489006][T12035] bridge0: left allmulticast mode [ 283.500751][T12035] vcan0: left promiscuous mode [ 283.500773][T12035] vcan0: left allmulticast mode [ 283.531239][T12035] bond0: left promiscuous mode [ 283.531261][T12035] bond0: left allmulticast mode [ 283.532096][T12052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.557399][T12035] team0: left promiscuous mode [ 283.557429][T12035] team0: left allmulticast mode [ 283.575972][T12035] nlmon0: left promiscuous mode [ 283.575996][T12035] nlmon0: left allmulticast mode [ 283.577006][T12035] batadv0: left promiscuous mode [ 283.577022][T12035] batadv0: left allmulticast mode [ 283.613743][T12057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1387'. [ 283.619352][T12035] vxcan0: left promiscuous mode [ 283.619374][T12035] vxcan0: left allmulticast mode [ 283.620299][T12035] vxcan1: left promiscuous mode [ 283.620313][T12035] vxcan1: left allmulticast mode [ 283.643444][T12035] veth0: left promiscuous mode [ 283.643465][T12035] veth0: left allmulticast mode [ 283.658893][T12035] veth1: left promiscuous mode [ 283.658913][T12035] veth1: left allmulticast mode [ 283.687445][T12035] wg0: left promiscuous mode [ 283.687469][T12035] wg0: left allmulticast mode [ 283.693859][T12035] wg1: left promiscuous mode [ 283.693890][T12035] wg1: left allmulticast mode [ 283.720112][T12035] wg2: left promiscuous mode [ 283.720135][T12035] wg2: left allmulticast mode [ 283.728575][T12035] veth0_to_bridge: left promiscuous mode [ 283.728595][T12035] veth0_to_bridge: left allmulticast mode [ 283.734050][T12035] bridge_slave_0: left promiscuous mode [ 283.734070][T12035] bridge_slave_0: left allmulticast mode [ 283.746597][T12035] veth1_to_bridge: left promiscuous mode [ 283.746619][T12035] veth1_to_bridge: left allmulticast mode [ 283.753990][T12035] bridge_slave_1: left promiscuous mode [ 283.754012][T12035] bridge_slave_1: left allmulticast mode [ 283.789899][T12035] veth0_to_bond: left promiscuous mode [ 283.789916][T12035] veth0_to_bond: left allmulticast mode [ 283.790032][T12035] bond_slave_0: left promiscuous mode [ 283.790040][T12035] bond_slave_0: left allmulticast mode [ 283.803734][T12035] veth1_to_bond: left promiscuous mode [ 283.803785][T12035] veth1_to_bond: left allmulticast mode [ 283.829910][T12035] bond_slave_1: left promiscuous mode [ 283.829932][T12035] bond_slave_1: left allmulticast mode [ 283.841582][T12035] veth0_to_team: left promiscuous mode [ 283.841608][T12035] veth0_to_team: left allmulticast mode [ 283.861120][T12035] team_slave_0: left promiscuous mode [ 283.861136][T12035] team_slave_0: left allmulticast mode [ 283.885396][T12035] veth1_to_team: left promiscuous mode [ 283.885421][T12035] veth1_to_team: left allmulticast mode [ 283.886374][T12035] team_slave_1: left promiscuous mode [ 283.886386][T12035] team_slave_1: left allmulticast mode [ 283.886573][T12035] veth0_to_batadv: left promiscuous mode [ 283.886582][T12035] veth0_to_batadv: left allmulticast mode [ 283.900325][T12035] batadv_slave_0: left promiscuous mode [ 283.900356][T12035] batadv_slave_0: left allmulticast mode [ 283.919955][T12035] veth1_to_batadv: left promiscuous mode [ 283.919976][T12035] veth1_to_batadv: left allmulticast mode [ 283.931283][T12035] batadv_slave_1: left promiscuous mode [ 283.931305][T12035] batadv_slave_1: left allmulticast mode [ 283.942917][T12035] xfrm0: left promiscuous mode [ 283.942938][T12035] xfrm0: left allmulticast mode [ 283.953963][T12035] veth0_to_hsr: left promiscuous mode [ 283.953984][T12035] veth0_to_hsr: left allmulticast mode [ 283.997449][T12035] veth1_to_hsr: left promiscuous mode [ 283.997488][T12035] veth1_to_hsr: left allmulticast mode [ 284.013517][T12035] hsr0: left promiscuous mode [ 284.013538][T12035] hsr0: left allmulticast mode [ 284.013550][T12035] hsr_slave_0: left allmulticast mode [ 284.013563][T12035] hsr_slave_1: left allmulticast mode [ 284.023312][T12035] veth1_virt_wifi: left promiscuous mode [ 284.023341][T12035] veth1_virt_wifi: left allmulticast mode [ 284.032306][T12035] veth0_virt_wifi: left promiscuous mode [ 284.032337][T12035] veth0_virt_wifi: left allmulticast mode [ 284.041165][T12035] virt_wifi0: left promiscuous mode [ 284.041186][T12035] virt_wifi0: left allmulticast mode [ 284.046696][T12035] ipvlan2: left allmulticast mode [ 284.046717][T12035] bond1: left allmulticast mode [ 284.047566][T12035] bond2: left allmulticast mode [ 284.047581][T12035] bridge3: left allmulticast mode [ 284.079966][T12035] veth3: left allmulticast mode [ 284.309550][T12062] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 284.331100][T12062] syzkaller0: left promiscuous mode [ 284.346128][ T12] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.346179][ T12] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.346214][ T12] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.346248][ T12] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.882050][T12099] sctp: [Deprecated]: syz.3.1399 (pid 12099) Use of int in max_burst socket option. [ 284.882050][T12099] Use struct sctp_assoc_value instead [ 285.224026][T12126] bond0: (slave team0): Releasing backup interface [ 285.267302][T12126] bond0: (slave dummy0): Releasing backup interface [ 285.299428][T12126] bridge_slave_0: left allmulticast mode [ 285.299458][T12126] bridge_slave_0: left promiscuous mode [ 285.299797][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.331391][T12126] bridge_slave_1: left allmulticast mode [ 285.331420][T12126] bridge_slave_1: left promiscuous mode [ 285.333269][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.381921][T12126] bond3: (slave veth0_to_bond): Releasing active interface [ 285.402889][T12126] bond0: (slave bond_slave_0): Releasing backup interface [ 285.426349][T12126] bond0: (slave bond_slave_1): Releasing backup interface [ 285.475913][T12126] team0: Port device team_slave_0 removed [ 285.509600][T12126] team0: Port device team_slave_1 removed [ 285.639106][T12136] macvtap0: entered allmulticast mode [ 285.639128][T12136] veth0_to_bridge: entered allmulticast mode [ 285.661481][T12136] veth0_to_bridge: left allmulticast mode [ 285.729684][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.007801][T12169] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 287.534953][ T29] net_ratelimit: 11 callbacks suppressed [ 287.534974][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.575818][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.018889][T12194] __nla_validate_parse: 14 callbacks suppressed [ 289.018905][T12194] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1424'. [ 289.023202][T12198] block nbd2: server does not support multiple connections per device. [ 289.027080][T12198] block nbd2: shutting down sockets [ 289.064007][T12199] block nbd3: server does not support multiple connections per device. [ 289.064316][T12199] block nbd3: shutting down sockets [ 289.103231][T12200] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1424'. [ 289.221476][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.617569][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.284569][T12238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1436'. [ 290.286659][T12239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1436'. [ 290.386435][T12246] lo: entered allmulticast mode [ 290.388153][T12249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1438'. [ 290.392968][T12246] lo: left allmulticast mode [ 290.406781][T12245] syzkaller0: entered promiscuous mode [ 290.406804][T12245] syzkaller0: entered allmulticast mode [ 290.422854][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 290.428280][T12243] hsr_slave_0: left promiscuous mode [ 290.440112][T12243] hsr_slave_1: left promiscuous mode [ 290.574611][T12260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 290.585910][T12253] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 290.591090][T12261] bridge0: port 1(bond0) entered blocking state [ 290.591209][T12261] bridge0: port 1(bond0) entered disabled state [ 290.591391][T12261] bond0: entered allmulticast mode [ 290.604235][T12261] bond0: entered promiscuous mode [ 290.663461][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.723827][T12266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1444'. [ 290.750848][T12268] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1444'. [ 290.811406][T12272] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 290.910470][T12273] netlink: 'syz.0.1446': attribute type 4 has an invalid length. [ 290.910505][T12273] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 290.910517][T12273] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 290.910528][T12273] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1446'. [ 290.910563][T12273] NCSI netlink: No device for ifindex 0 [ 290.927042][T12280] netlink: 'syz.0.1446': attribute type 4 has an invalid length. [ 290.927063][T12280] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 290.927074][T12280] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 290.927089][T12280] NCSI netlink: No device for ifindex 0 [ 291.695740][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.255650][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.735655][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.754439][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.777656][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.879680][T12297] IPVS: Unknown mcast interface: dvmrp0 [ 294.159324][T12321] xt_l2tp: invalid flags combination: 8 [ 294.317015][T12332] __nla_validate_parse: 4 callbacks suppressed [ 294.317034][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 294.660941][T12336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1467'. [ 294.815537][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.837304][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 295.296065][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.332089][T12367] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1474'. [ 295.463529][T12374] bridge0: entered allmulticast mode [ 295.553852][T12375] rxe_eth0 speed is unknown, defaulting to 1000 [ 295.663583][T12386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.664119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.664397][T12386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.856841][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.027617][T12386] batman_adv: batadv0: Adding interface: macvlan0 [ 296.027631][T12386] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.027649][T12386] batman_adv: batadv0: Interface activated: macvlan0 [ 296.027659][T12386] batadv0: mtu less than device minimum [ 296.481607][T12417] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 296.811154][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 296.860952][T12428] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.599597][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1486'. [ 297.943892][T10952] net_ratelimit: 22 callbacks suppressed [ 297.943913][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.047163][T12469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1493'. [ 298.047562][T12469] unsupported nlmsg_type 40 [ 298.192493][T12472] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 298.194613][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'. [ 298.195499][T12475] nbd: must specify a size in bytes for the device [ 298.197352][T12461] bond5: entered allmulticast mode [ 298.199128][T12461] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.318643][T12473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1497'. [ 298.340932][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.653686][T12490] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1501'. [ 298.979451][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.172954][T12518] xt_l2tp: invalid flags combination: 8 [ 299.568042][T12535] netlink: 'syz.1.1515': attribute type 2 has an invalid length. [ 299.568068][T12535] __nla_validate_parse: 2 callbacks suppressed [ 299.568079][T12535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1515'. [ 299.614251][T12535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 299.748527][T12536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1514'. [ 299.748568][T12536] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1514'. [ 300.018961][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.746773][T12558] bond8 (unregistering): Released all slaves [ 300.828670][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1517'. [ 300.847482][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1517'. [ 301.055900][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.368922][T12584] netlink: 'syz.0.1526': attribute type 19 has an invalid length. [ 301.385545][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.454244][T12587] netlink: zone id is out of range [ 301.454260][T12587] netlink: zone id is out of range [ 301.454268][T12587] netlink: zone id is out of range [ 301.454275][T12587] netlink: zone id is out of range [ 302.125386][T12617] x_tables: duplicate underflow at hook 2 [ 302.641803][T12640] netlink: 'syz.1.1537': attribute type 1 has an invalid length. [ 302.718874][T12636] netlink: 'syz.4.1535': attribute type 9 has an invalid length. [ 302.771121][T12636] ip6tnl2: entered promiscuous mode [ 302.792042][T12648] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1537'. [ 302.792064][T12648] tc_dump_action: action bad kind [ 302.967379][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1539'. [ 303.091706][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1540'. [ 303.091735][T12664] block nbd2: Unsupported socket: should be TCP or UNIX. [ 303.098395][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1540'. [ 303.135605][T10952] net_ratelimit: 17 callbacks suppressed [ 303.135624][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.177558][T12668] sctp: [Deprecated]: syz.1.1540 (pid 12668) Use of int in max_burst socket option. [ 303.177558][T12668] Use struct sctp_assoc_value instead [ 304.175751][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.425744][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.217728][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.995801][T12734] __nla_validate_parse: 4 callbacks suppressed [ 305.995822][T12734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1559'. [ 306.133989][T12739] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20001 [ 306.255549][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.318996][T12764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.498272][T12769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1564'. [ 306.502620][T12769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1564'. [ 306.525650][T12773] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1566'. [ 306.652428][T12775] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1567'. [ 306.709666][T12778] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 306.756566][T12779] netlink: 'syz.4.1568': attribute type 6 has an invalid length. [ 306.859107][T12781] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1569'. [ 307.296987][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.419836][T12792] ip_tables: iptables: counters copy to user failed while replacing table [ 307.439157][T12792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.461970][T12792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.513328][T12800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1574'. [ 307.641425][T12812] xt_ecn: cannot match TCP bits for non-tcp packets [ 307.783681][T12820] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 307.808642][T12818] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 307.825414][T12820] bond7: entered promiscuous mode [ 307.825903][T12820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.017868][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1583'. [ 308.090393][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 308.090410][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1586'. [ 308.337894][ T24] net_ratelimit: 3 callbacks suppressed [ 308.337935][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.532544][T12856] netlink: 'syz.3.1589': attribute type 4 has an invalid length. [ 308.910594][T12859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.942688][T12859] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.983448][T12859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.060647][T12859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.062219][T12859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.068980][T12859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.069012][T12859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.072893][T12859] veth1_vlan: left promiscuous mode [ 309.074186][T12859] veth0_vlan: left promiscuous mode [ 309.082224][T12859] veth0_vlan: entered promiscuous mode [ 309.087821][T12859] veth1_vlan: entered promiscuous mode [ 309.092573][T12859] veth1_macvtap: left promiscuous mode [ 309.097212][T12859] veth1_macvtap: entered promiscuous mode [ 309.103950][T12859] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 309.116395][T12546] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.116648][T12546] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.120586][T12547] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.120741][T12547] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.146215][ T6657] bridge0: port 3(veth0) entered blocking state [ 309.146317][ T6657] bridge0: port 3(veth0) entered forwarding state [ 309.150659][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.150778][ T6657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.160172][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.160296][ T6657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.379868][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.431169][T12888] syzkaller0: entered promiscuous mode [ 309.431194][T12888] syzkaller0: entered allmulticast mode [ 309.433484][T12875] tipc: Started in network mode [ 309.433513][T12875] tipc: Node identity fa36324bd326, cluster identity 4711 [ 309.450505][T12875] tipc: Enabled bearer , priority 0 [ 309.540459][T12879] syzkaller0: entered promiscuous mode [ 309.540476][T12879] syzkaller0: entered allmulticast mode [ 310.428849][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.501980][T10942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.460248][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.924595][T12919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.925619][T12919] batadv0: mtu less than device minimum [ 311.927296][T12919] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.928760][T12919] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.930091][T12919] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 311.953426][T12919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.961141][T12919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.995565][T12919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.004201][T12919] batman_adv: batadv0: Interface deactivated: dummy0 [ 312.004225][T12919] batman_adv: batadv0: Removing interface: dummy0 [ 312.021487][T12919] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 312.021516][T12919] batman_adv: batadv0: Removing interface: ipvlan0 [ 312.022113][T12919] batman_adv: batadv0: Interface deactivated: macvlan0 [ 312.022132][T12919] batman_adv: batadv0: Removing interface: macvlan0 [ 312.082164][ T5763] tipc: Node number set to 688927307 [ 313.217231][T12978] __nla_validate_parse: 1 callbacks suppressed [ 313.217254][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 313.240253][T12978] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1611'. [ 313.535600][ T29] net_ratelimit: 39 callbacks suppressed [ 313.535620][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.535639][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.618338][T12985] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1612'. [ 313.756791][T12996] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1617'. [ 314.157333][T13012] netlink: 'syz.2.1622': attribute type 4 has an invalid length. [ 314.240278][T13024] vcan0: tx address claim with different name [ 314.247433][T13020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1624'. [ 314.262649][T13028] vcan0: tx address claim with different name [ 314.576685][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.627301][T13036] block nbd2: server does not support multiple connections per device. [ 314.632940][T13036] block nbd2: shutting down sockets [ 314.692425][T13040] veth0_to_bridge: entered promiscuous mode [ 314.692716][T13040] macvtap0: entered allmulticast mode [ 314.692731][T13040] veth0_to_bridge: entered allmulticast mode [ 314.694317][T13047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1628'. [ 314.709192][T13047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1628'. [ 314.726213][T13047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1628'. [ 314.733386][T13047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1628'. [ 315.428875][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1633'. [ 315.442535][T13070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.443505][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.478274][T13070] bridge_slave_0: left allmulticast mode [ 315.479859][T13070] bridge_slave_0: left promiscuous mode [ 315.480092][T13070] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.556886][T13070] bridge_slave_1: left allmulticast mode [ 315.556909][T13070] bridge_slave_1: left promiscuous mode [ 315.557202][T13070] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.616374][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.648271][T13070] bond0: (slave bond_slave_0): Releasing backup interface [ 315.674327][T13070] bond0: (slave bond_slave_1): Releasing backup interface [ 315.727016][T13070] team0: Port device team_slave_0 removed [ 315.780412][T13070] team0: Port device team_slave_1 removed [ 315.799853][T13070] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.040817][T13087] syz_tun: entered allmulticast mode [ 316.324075][T13086] syz_tun: left allmulticast mode [ 316.592199][T10941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.655492][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.377259][T13146] syzkaller0: Caught tx_queue_len zero misconfig [ 317.512541][T13154] syzkaller1: entered promiscuous mode [ 317.512563][T13154] syzkaller1: entered allmulticast mode [ 317.698083][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.723366][T13169] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 317.993275][T13175] xt_CT: No such helper "netbios-ns" [ 318.009514][T13180] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 318.076285][T13184] syzkaller0: entered promiscuous mode [ 318.076308][T13184] syzkaller0: entered allmulticast mode [ 318.113321][T13188] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 318.271993][T13206] __nla_validate_parse: 12 callbacks suppressed [ 318.272014][T13206] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1665'. [ 318.492909][T13216] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1666'. [ 318.626311][T13231] netlink: 'syz.3.1670': attribute type 1 has an invalid length. [ 318.676325][T13231] 8021q: adding VLAN 0 to HW filter on device bond11 [ 318.736035][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.788802][T13239] x_tables: unsorted entry at hook 2 [ 318.864381][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 318.864407][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 318.864473][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1676'. [ 319.318509][T13268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1681'. [ 319.347471][T13273] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1682'. [ 319.552818][T13280] syzkaller0: entered allmulticast mode [ 319.658355][T10942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.776273][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.957787][T13310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.958057][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.963285][T13310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.964048][T12548] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.004898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.007253][T13310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.007520][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.260220][T13322] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1694'. [ 320.452013][T13337] netlink: 'syz.4.1700': attribute type 1 has an invalid length. [ 320.514501][T13337] 8021q: adding VLAN 0 to HW filter on device bond6 [ 320.560262][T13340] bond6: entered promiscuous mode [ 320.560289][T13340] bond6: entered allmulticast mode [ 320.563032][T13338] veth0_to_bond: left promiscuous mode [ 320.563052][T13338] veth0_to_bond: left allmulticast mode [ 320.602395][T13338] bond6: (slave veth0_to_bond): making interface the new active one [ 320.602419][T13338] veth0_to_bond: entered promiscuous mode [ 320.602605][T13338] veth0_to_bond: entered allmulticast mode [ 320.634972][T13338] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 320.669033][T13341] macvlan0: entered promiscuous mode [ 320.669056][T13341] macvlan0: entered allmulticast mode [ 320.673165][T13341] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 320.682705][T13341] bond6: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 320.823143][T13353] xt_hashlimit: size too large, truncated to 1048576 [ 320.833648][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 320.833678][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1698'. [ 320.891590][T13327] bridge3: entered promiscuous mode [ 320.891612][T13327] bridge3: entered allmulticast mode [ 320.902889][T13327] bridge4: entered promiscuous mode [ 320.902908][T13327] bridge4: entered allmulticast mode [ 320.911644][T13327] bridge5: entered promiscuous mode [ 320.911665][T13327] bridge5: entered allmulticast mode [ 320.921030][T13327] bridge6: entered promiscuous mode [ 320.921050][T13327] bridge6: entered allmulticast mode [ 320.929908][T13327] bridge7: entered promiscuous mode [ 320.929929][T13327] bridge7: entered allmulticast mode [ 320.940269][T13327] bridge8: entered promiscuous mode [ 320.940289][T13327] bridge8: entered allmulticast mode [ 320.949840][T13327] bridge9: entered promiscuous mode [ 320.949860][T13327] bridge9: entered allmulticast mode [ 320.959604][T13327] bridge10: entered promiscuous mode [ 320.959626][T13327] bridge10: entered allmulticast mode [ 320.969775][T13327] bridge11: entered promiscuous mode [ 320.969796][T13327] bridge11: entered allmulticast mode [ 320.981276][T13327] bridge12: entered promiscuous mode [ 320.981298][T13327] bridge12: entered allmulticast mode [ 320.993481][T13327] bridge13: entered promiscuous mode [ 320.993502][T13327] bridge13: entered allmulticast mode [ 321.032587][T13327] bridge14: entered promiscuous mode [ 321.032610][T13327] bridge14: entered allmulticast mode [ 321.092101][T13327] bridge15: entered promiscuous mode [ 321.092121][T13327] bridge15: entered allmulticast mode [ 321.132422][T13327] bridge16: entered promiscuous mode [ 321.132445][T13327] bridge16: entered allmulticast mode [ 321.163636][T13327] bridge17: entered promiscuous mode [ 321.163659][T13327] bridge17: entered allmulticast mode [ 321.225480][T13327] bridge18: entered promiscuous mode [ 321.225504][T13327] bridge18: entered allmulticast mode [ 322.271221][T13387] veth5: entered allmulticast mode [ 322.409500][T13408] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 322.459847][T13410] vlan0: entered promiscuous mode [ 322.459872][T13410] bridge0: entered promiscuous mode [ 322.747246][T13425] syzkaller0: entered promiscuous mode [ 322.747268][T13425] syzkaller0: entered allmulticast mode [ 323.099473][T13450] @: renamed from dummy0 (while UP) [ 323.153961][T13454] netlink: 'syz.4.1721': attribute type 21 has an invalid length. [ 323.531604][T13474] netlink: 'syz.4.1729': attribute type 4 has an invalid length. [ 323.531632][T13474] __nla_validate_parse: 68 callbacks suppressed [ 323.531644][T13474] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1729'. [ 323.541002][T13475] netlink: 'syz.4.1729': attribute type 4 has an invalid length. [ 323.541024][T13475] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1729'. [ 323.565701][T13473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 323.616913][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'. [ 323.684549][T13479] geneve4: entered promiscuous mode [ 323.953439][T10952] net_ratelimit: 6 callbacks suppressed [ 323.953462][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.009899][T13498] xt_hashlimit: size too large, truncated to 1048576 [ 324.977283][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.397792][T13568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1746'. [ 325.461146][T13574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.461657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.523405][T13577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 325.539089][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1749'. [ 325.776884][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.017259][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.308267][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 326.308300][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 326.360335][T13631] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 326.388660][T13631] gretap0: entered promiscuous mode [ 326.407932][T13631] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 326.429795][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 326.442502][T13631] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 326.467657][T13639] netlink: 'syz.1.1762': attribute type 1 has an invalid length. [ 326.905572][T13670] tipc: Can't bind to reserved service type 2 [ 326.925880][T13670] nbd: must specify at least one socket [ 326.933388][T13670] ebt_among: dst integrity fail: 200 [ 327.115550][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.961335][T13706] xt_hashlimit: size too large, truncated to 1048576 [ 328.015851][T13714] netlink: 'syz.1.1777': attribute type 9 has an invalid length. [ 328.175936][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.803848][T13742] ip_tables: iptables: counters copy to user failed while replacing table [ 328.817111][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.196889][T13756] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 329.197146][T13756] Cannot find map_set index 2 as target [ 329.207881][T13763] batadv_slave_1: entered promiscuous mode [ 329.215787][T10952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.449446][T13777] __nla_validate_parse: 44 callbacks suppressed [ 329.449470][T13777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1785'. [ 329.642242][T13777] bond9: option primary_reselect: invalid value (6) [ 329.664186][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 329.680466][T13777] bond9 (unregistering): Released all slaves [ 329.730811][T13775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1788'. [ 329.888913][T13793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.889246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.891919][T13793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.892663][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.934881][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.023863][T13803] veth0_virt_wifi: left allmulticast mode [ 330.255534][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.354053][T13790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.354282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.980816][T13815] bridge0: port 3(veth0) entered disabled state [ 330.981302][T13815] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.981706][T13815] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.147001][ T195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.148898][T13839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1797'. [ 331.176432][T13815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.180606][T13815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.272426][T13815] veth0_to_bridge: left allmulticast mode [ 331.335904][T12548] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.335996][T12548] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.336031][T12548] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.336062][T12548] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.565996][T13811] bond0 (unregistering): Released all slaves [ 331.588906][T13845] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1799'. [ 331.822657][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 332.076270][T13865] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1801'. [ 332.230710][T13874] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1801'. [ 332.341950][T13856] udevd[13856]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 332.380553][T13852] udevd[13852]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 333.708806][T13909] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1808'. [ 333.794454][T13913] Bluetooth: hci0: unsupported parameter 5135 [ 333.794476][T13913] Bluetooth: hci0: unsupported parameter 8192 [ 333.794488][T13913] Bluetooth: hci0: unsupported parameter 5135 [ 333.794497][T13913] Bluetooth: hci0: unsupported parameter 8192 [ 333.827992][T13916] Bluetooth: hci0: unsupported parameter 5135 [ 333.828015][T13916] Bluetooth: hci0: unsupported parameter 8192 [ 333.828026][T13916] Bluetooth: hci0: unsupported parameter 5135 [ 333.828036][T13916] Bluetooth: hci0: unsupported parameter 8192 [ 334.121496][T13929] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 334.162008][T13929] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 334.343509][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'. [ 334.344089][T13949] tipc: Resetting bearer [ 334.497790][T10948] net_ratelimit: 4 callbacks suppressed [ 334.497810][T10948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.554566][T13949] tipc: Disabling bearer [ 334.895595][T10934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.171106][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1820'. [ 335.172248][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1820'. [ 335.339167][T13999] netlink: 4976 bytes leftover after parsing attributes in process `syz.3.1822'. [ 335.620440][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.938589][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'. [ 336.261978][T14037] block nbd3: NBD_DISCONNECT [ 336.658886][T10948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.903555][T14074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 336.903983][T14077] x_tables: unsorted entry at hook 1 [ 336.918551][T14079] netlink: 'syz.1.1836': attribute type 1 has an invalid length. [ 336.968531][T14079] bond0: entered promiscuous mode [ 336.969015][T14079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.997172][T14076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1836'. [ 337.064849][T14076] bond0: (slave bridge8): making interface the new active one [ 337.065178][T14076] bridge8: entered promiscuous mode [ 337.066316][T14076] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 337.204306][T14079] bond0: (slave bridge9): Enslaving as a backup interface with an up link [ 337.472246][T14108] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1842'. [ 337.573170][T14112] netlink: 'syz.3.1844': attribute type 1 has an invalid length. [ 337.695462][T10948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.729148][T14120] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1844'. [ 337.755883][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1844'. [ 337.757519][T14112] 8021q: adding VLAN 0 to HW filter on device bond12 [ 337.881181][T14112] bond12: (slave bridge17): making interface the new active one [ 337.909627][T14112] bond12: (slave bridge17): Enslaving as an active interface with an up link [ 337.945889][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.421220][T14139] syzkaller0: entered promiscuous mode [ 338.423021][T14139] batman_adv: batadv0: Interface activated: syzkaller0 [ 338.456082][T12548] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.456956][T12548] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.457060][T12548] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.457116][T12548] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.738336][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.794022][T14163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1851'. [ 339.107186][T14174] netlink: 'syz.3.1854': attribute type 1 has an invalid length. [ 339.147395][T14174] netlink: 'syz.3.1854': attribute type 2 has an invalid length. [ 339.529061][T14195] netlink: 'syz.4.1857': attribute type 1 has an invalid length. [ 339.798604][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.980285][T14195] 8021q: adding VLAN 0 to HW filter on device bond7 [ 340.404298][T14220] __nla_validate_parse: 2 callbacks suppressed [ 340.404320][T14220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1864'. [ 340.476236][T14223] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1865'. [ 340.509932][T14218] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 340.718954][T14220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1864'. [ 340.718981][T14220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1864'. [ 340.718997][T14220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1864'. [ 340.762244][T10934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.816148][T10949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.997038][T10936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.030246][T14239] syzkaller1: entered promiscuous mode [ 341.030269][T14239] syzkaller1: entered allmulticast mode [ 341.129870][T14243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1867'. [ 341.281516][T14256] x_tables: duplicate underflow at hook 3 [ 341.390009][T14256] veth0_to_bridge: entered promiscuous mode [ 341.397015][T14256] macvtap1: entered allmulticast mode [ 341.397035][T14256] veth0_to_bridge: entered allmulticast mode [ 341.420620][T14256] veth0_to_bridge: left allmulticast mode [ 341.420648][T14256] veth0_to_bridge: left promiscuous mode [ 341.855817][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.358957][T14306] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.409429][T14311] netlink: 'syz.3.1881': attribute type 4 has an invalid length. [ 342.411485][T14306] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.503072][T14306] bond6: (slave veth0_to_bond): Releasing active interface [ 342.503108][T14306] veth0_to_bond: left promiscuous mode [ 342.503298][T14306] veth0_to_bond: left allmulticast mode [ 342.548956][T14306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.548983][T14306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.553108][T14306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.553131][T14306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.596202][T14306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 342.733323][T14322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1883'. [ 342.749689][T14322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1883'. [ 342.770784][T14322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1883'. [ 342.802697][T14322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1883'. [ 342.897980][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.257527][T14347] ip_tables: iptables: counters copy to user failed while replacing table [ 343.837363][T14377] bond8: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 343.840550][T14377] bond8 (unregistering): Released all slaves [ 343.842658][T14383] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 343.937581][T10949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.969788][T14383] bond10: entered promiscuous mode [ 343.970985][T14383] 8021q: adding VLAN 0 to HW filter on device bond10 [ 344.022243][T14389] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 344.022271][T14389] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 344.022286][T14389] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 344.024276][T10934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.616883][T14390] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 344.616910][T14390] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 344.977987][T10948] net_ratelimit: 1 callbacks suppressed [ 344.978008][T10948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.015552][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.057616][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.063464][T14430] xt_TCPMSS: Only works on TCP SYN packets [ 347.079703][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.183637][T14434] __nla_validate_parse: 39 callbacks suppressed [ 347.183660][T14434] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1905'. [ 347.183677][T14434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1905'. [ 347.183691][T14434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1905'. [ 347.235575][T14434] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1905'. [ 347.872146][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1913'. [ 347.872189][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1913'. [ 347.929413][T14489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.929770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.095533][T10948] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.116424][T14500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1918'. [ 348.419707][T14513] x_tables: duplicate underflow at hook 3 [ 348.455778][T14512] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1920'. [ 348.692959][T14519] netlink: 'syz.2.1921': attribute type 1 has an invalid length. [ 349.139429][T10951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.398801][T14561] netlink: 'syz.0.1926': attribute type 4 has an invalid length. [ 349.463058][T14571] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 349.682002][T14581] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1931'. [ 350.329160][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1938'. [ 350.837992][T14636] xt_CT: No such helper "snmp" [ 350.941685][T14645] xt_CT: No such helper "snmp" [ 351.526773][T14680] netlink: 'syz.3.1948': attribute type 2 has an invalid length. [ 351.549272][T14680] !;: entered promiscuous mode [ 351.713895][T14688] syzkaller0: Caught tx_queue_len zero misconfig [ 351.917899][T14696] netlink: 'syz.2.1951': attribute type 362 has an invalid length. [ 352.133116][T14703] bond9 (unregistering): Released all slaves [ 352.462036][T14715] tipc: Enabling of bearer rejected, already enabled [ 352.641352][T14731] nbd: must specify at least one socket [ 352.720058][T14733] syzkaller1: entered promiscuous mode [ 352.720081][T14733] syzkaller1: entered allmulticast mode [ 353.192697][T14748] netlink: 'syz.4.1966': attribute type 1 has an invalid length. [ 353.244008][T14757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1966'. [ 353.280500][T14748] bond8: option mode: invalid value (7) [ 353.294190][T14748] bond8 (unregistering): Released all slaves [ 353.363150][T14759] netlink: 'syz.4.1966': attribute type 10 has an invalid length. [ 353.363175][T14759] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1966'. [ 353.757559][T14781] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1972'. [ 353.918891][T14790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1974'. [ 354.731174][T14824] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1979'. [ 354.766504][T14826] x_tables: duplicate underflow at hook 1 [ 354.905614][T14829] vlan1: entered promiscuous mode [ 354.905637][T14829] bond0: entered promiscuous mode [ 354.948021][T14829] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1981'. [ 355.331866][T14855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1985'. [ 355.920983][T14897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1994'. [ 355.921509][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1994'. [ 355.921590][T14898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1994'. [ 356.364316][T14920] tipc: Resetting bearer [ 357.103413][T14951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.490490][T14977] netlink: 'syz.1.2008': attribute type 10 has an invalid length. [ 358.155274][T15005] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 358.428051][T15014] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.477983][T15014] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 358.897877][T15041] __nla_validate_parse: 4 callbacks suppressed [ 358.897901][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'. [ 358.930146][T15041] netlink: 'syz.2.2022': attribute type 13 has an invalid length. [ 358.931879][T15041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'. [ 361.872910][T15115] syzkaller0: entered promiscuous mode [ 361.872932][T15115] syzkaller0: entered allmulticast mode [ 361.904041][T15119] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 361.953135][T15116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2026'. [ 362.108072][T15127] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2028'. [ 362.131941][T15123] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2027'. [ 362.131992][T15123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2027'. [ 362.179613][T15123] vcan1: entered promiscuous mode [ 362.179635][T15123] vcan1: entered allmulticast mode [ 362.321760][T15139] netlink: 'syz.3.2029': attribute type 1 has an invalid length. [ 362.321783][T15139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2029'. [ 362.560593][T15145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2030'. [ 362.560617][T15145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2030'. [ 363.166410][T15169] ip6gretap2: entered allmulticast mode [ 363.268369][T15173] syzkaller0: entered promiscuous mode [ 363.268395][T15173] syzkaller0: entered allmulticast mode [ 363.514203][T15192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2037'. [ 363.638714][T15203] tipc: Enabled bearer , priority 0 [ 363.670282][T15203] netlink: 'syz.4.2039': attribute type 9 has an invalid length. [ 363.971093][T15214] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.989228][T15214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.079361][T15214] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 364.106442][T15215] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 364.203512][T15202] tipc: Disabling bearer [ 364.369521][T15181] infiniband syz0: set active [ 364.372025][T15222] ip6gre1: entered promiscuous mode [ 364.372045][T15222] ip6gre1: entered allmulticast mode [ 364.372998][T15181] infiniband syz0: added bond0 [ 364.428712][T15181] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 364.428749][T15181] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 364.428808][T15181] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 364.491058][T15181] RDS/IB: syz0: added [ 364.491118][T15181] smc: adding ib device syz0 with port count 1 [ 364.491137][T15181] smc: ib device syz0 port 1 has no pnetid [ 364.530434][T15228] __nla_validate_parse: 3 callbacks suppressed [ 364.530533][T15228] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2041'. [ 364.530552][T15228] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2041'. [ 364.530567][T15228] netlink: 'syz.0.2041': attribute type 6 has an invalid length. [ 364.530579][T15228] netlink: 'syz.0.2041': attribute type 5 has an invalid length. [ 364.530591][T15228] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2041'. [ 364.931459][T12548] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.931677][T12548] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 364.957041][T10934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.191188][T15259] Bluetooth: hci0: unsupported parameter 5134 [ 365.191220][T15259] Bluetooth: hci0: unsupported parameter 8192 [ 365.191232][T15259] Bluetooth: hci0: unsupported parameter 5134 [ 365.191244][T15259] Bluetooth: hci0: unsupported parameter 8192 [ 365.355580][ T5756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.563313][T15269] netlink: 'syz.3.2049': attribute type 4 has an invalid length. [ 365.563772][T15269] netlink: 'syz.3.2049': attribute type 4 has an invalid length. [ 365.775940][ T5756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.956432][T15281] sctp: [Deprecated]: syz.3.2052 (pid 15281) Use of int in max_burst socket option. [ 365.956432][T15281] Use struct sctp_assoc_value instead [ 366.000009][T15281] nft_compat: unsupported protocol 1 [ 366.352825][T15298] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 366.419148][T15298] bond8: entered promiscuous mode [ 366.419695][T15298] 8021q: adding VLAN 0 to HW filter on device bond8 [ 366.641434][T15301] 8021q: adding VLAN 0 to HW filter on device bond8 [ 366.641887][T15301] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 366.641907][T15301] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 366.682143][T15301] bond8: (slave wireguard0): making interface the new active one [ 366.682171][T15301] wireguard0: entered promiscuous mode [ 366.701799][T15301] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 366.701904][T15305] netlink: 'syz.0.2054': attribute type 4 has an invalid length. [ 367.895275][T15326] netlink: 'syz.0.2057': attribute type 1 has an invalid length. [ 367.949755][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'. [ 367.949793][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'. [ 367.997703][T15326] bond10: entered promiscuous mode [ 368.006089][T15326] 8021q: adding VLAN 0 to HW filter on device bond10 [ 368.011768][T15331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2057'. [ 368.351615][T15352] netlink: zone id is out of range [ 368.351634][T15352] netlink: zone id is out of range [ 368.351643][T15352] netlink: zone id is out of range [ 368.351650][T15352] netlink: zone id is out of range [ 368.351658][T15352] netlink: zone id is out of range [ 368.351665][T15352] netlink: zone id is out of range [ 368.351671][T15352] netlink: zone id is out of range [ 368.351678][T15352] netlink: zone id is out of range [ 368.351685][T15352] netlink: zone id is out of range [ 368.351693][T15352] netlink: zone id is out of range [ 368.638634][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2063'. [ 369.227326][T15397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2066'. [ 369.277063][T15401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2066'. [ 369.374861][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 369.785680][T15421] syz_tun: entered promiscuous mode [ 369.785869][T15421] macsec2: entered promiscuous mode [ 369.810751][T15421] syz_tun: left promiscuous mode [ 369.841885][T15427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 370.412411][T15446] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 370.625530][T15454] tipc: Enabled bearer , priority 0 [ 370.628208][T15453] tipc: Enabling of bearer rejected, already enabled [ 370.670435][T15453] tipc: Resetting bearer [ 371.237406][T15490] netlink: 'syz.0.2083': attribute type 1 has an invalid length. [ 371.237431][T15490] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2083'. [ 371.244328][T15490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2083'. [ 371.431645][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'. [ 371.482412][T15496] udevd[15496]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 371.500982][T15496] udevd[15496]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 371.849143][T15508] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2087'. [ 371.849165][T15508] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2087'. [ 371.878400][T15508] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2087'. [ 371.878478][T15508] veth0: Caught tx_queue_len zero misconfig [ 372.022256][T15521] tipc: Enabled bearer , priority 0 [ 372.032715][T15517] syzkaller0: entered promiscuous mode [ 372.032737][T15517] syzkaller0: entered allmulticast mode [ 372.100883][T15526] netlink: 'syz.1.2090': attribute type 3 has an invalid length. [ 372.100905][T15526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 372.188485][T15517] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 372.239340][T15511] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 372.254095][T15517] tipc: Resetting bearer [ 372.281938][T15510] tipc: Resetting bearer [ 372.318085][T15526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2090'. [ 372.318120][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2090'. [ 372.413931][T15510] tipc: Disabling bearer [ 372.633408][T15547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 372.780293][T15555] bond_slave_1: entered promiscuous mode [ 372.966207][T15566] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 373.002832][T15577] syzkaller0: left promiscuous mode [ 373.002855][T15577] syzkaller0: left allmulticast mode [ 373.924392][T15624] sit1: entered allmulticast mode [ 374.383291][T15645] netlink: 'syz.2.2115': attribute type 21 has an invalid length. [ 374.467908][T15645] netlink: 'syz.2.2115': attribute type 5 has an invalid length. [ 375.011591][T15679] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 375.177298][T15686] x_tables: duplicate underflow at hook 2 [ 375.188015][T15682] ip6tnl4: entered allmulticast mode [ 376.062898][T15751] xt_hashlimit: size too large, truncated to 1048576 [ 376.240782][T15763] tipc: Cannot configure node identity twice [ 376.247362][T15763] __nla_validate_parse: 10 callbacks suppressed [ 376.247382][T15763] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2146'. [ 376.481255][T15774] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2147'. [ 376.980318][T15796] net_ratelimit: 41 callbacks suppressed [ 376.980354][T15796] openvswitch: netlink: Message has 70 unknown bytes. [ 376.980411][T15796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.207594][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2154'. [ 377.542359][T15810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2154'. [ 377.694607][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'. [ 377.759491][T15820] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 377.972496][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972533][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972558][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972580][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972600][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972622][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972643][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972683][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972704][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972726][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972745][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972767][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972787][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972808][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972830][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972851][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972872][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972892][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972913][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972935][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972956][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.972979][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973001][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973023][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973044][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973066][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973088][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973110][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973133][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973155][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973177][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973199][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 377.973221][T15842] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 378.210940][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'. [ 378.505800][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 378.606252][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 378.642203][T15862] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 378.701353][T15830] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 379.094352][T15866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 381.104292][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 381.407510][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 381.434448][T15893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.449185][T15876] xfrm1: entered promiscuous mode [ 381.449206][T15876] xfrm1: entered allmulticast mode [ 381.452498][T15876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 381.513805][T15907] bridge0: port 1(syz_tun) entered blocking state [ 381.513963][T15907] bridge0: port 1(syz_tun) entered disabled state [ 381.514145][T15907] syz_tun: entered allmulticast mode [ 381.540784][T15907] syz_tun: entered promiscuous mode [ 381.541417][T15907] bridge0: port 1(syz_tun) entered blocking state [ 381.541520][T15907] bridge0: port 1(syz_tun) entered forwarding state [ 381.712214][T15907] bridge0: port 2(ip6gretap0) entered blocking state [ 381.712306][T15907] bridge0: port 2(ip6gretap0) entered disabled state [ 381.712498][T15907] ip6gretap0: entered allmulticast mode [ 381.728695][T15907] ip6gretap0: entered promiscuous mode [ 381.731620][T15907] bridge0: port 2(ip6gretap0) entered blocking state [ 381.731770][T15907] bridge0: port 2(ip6gretap0) entered forwarding state [ 383.132510][T15977] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2179'. [ 383.146813][T15976] IPv6: NLM_F_CREATE should be specified when creating new route [ 383.306228][T15976] syzkaller1: entered promiscuous mode [ 383.306251][T15976] syzkaller1: entered allmulticast mode [ 383.761280][T15983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2180'. [ 383.777500][T16007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 383.782659][T16023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2188'. [ 384.022367][T16027] syzkaller0: entered promiscuous mode [ 384.022392][T16027] syzkaller0: entered allmulticast mode [ 384.898215][T16060] batman_adv: batadv0: Adding interface: syzkaller0 [ 384.898232][T16060] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.898757][T16060] batman_adv: batadv0: Interface activated: syzkaller0 [ 384.940136][T16050] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 385.021802][T16050] batman_adv: batadv0: Removing interface: syzkaller0 [ 385.130597][ T144] IPVS: starting estimator thread 0... [ 385.143835][T16077] netlink: 'syz.3.2194': attribute type 1 has an invalid length. [ 385.162475][T16077] batadv_slave_1: Caught tx_queue_len zero misconfig [ 385.214982][T16078] IPVS: using max 37 ests per chain, 88800 per kthread [ 385.376942][T16085] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2196'. [ 385.403305][T16091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2197'. [ 385.422197][T16095] ip_tables: iptables: counters copy to user failed while replacing table [ 386.144483][T16089] netlink: 'syz.1.2199': attribute type 1 has an invalid length. [ 386.144520][T16089] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2199'. [ 386.144538][T16089] nbd: couldn't find a device at index 767 [ 386.336793][T16136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2206'. [ 386.382325][T16138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2207'. [ 386.473270][T16146] tipc: Enabled bearer , priority 13 [ 386.568552][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2212'. [ 386.780817][T16154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 386.792762][T16163] tipc: Enabled bearer , priority 0 [ 386.920260][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 386.920660][T16157] ip6_vti0: left promiscuous mode [ 386.920676][T16157] ip6_vti0: left allmulticast mode [ 386.938778][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 386.938804][T16157] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 387.008409][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2215'. [ 387.027013][T16170] bridge0: left allmulticast mode [ 387.138866][T16173] bond11: option tlb_dynamic_lb: invalid value (255) [ 387.161644][T16173] bond11 (unregistering): Released all slaves [ 387.337231][T16190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.355593][T16195] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2220'. [ 387.355617][T16195] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2220'. [ 387.355630][T16195] netlink: 'syz.4.2220': attribute type 6 has an invalid length. [ 387.355642][T16195] netlink: 'syz.4.2220': attribute type 5 has an invalid length. [ 387.355652][T16195] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2220'. [ 387.486167][T16199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.698440][T16215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2224'. [ 387.698481][T16215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2224'. [ 388.652252][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 388.979114][ T12] wlan1: Trigger new scan to find an IBSS to join [ 389.110630][T16300] syzkaller0: entered promiscuous mode [ 389.110652][T16300] syzkaller0: entered allmulticast mode [ 389.870149][T16322] netlink: 'syz.0.2243': attribute type 1 has an invalid length. [ 389.913519][T16324] gretap2: entered allmulticast mode [ 389.958075][T16329] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 390.676439][T16367] bridge0: port 1(syz_tun) entered blocking state [ 390.679993][T16367] bridge0: port 1(syz_tun) entered disabled state [ 390.680152][T16367] syz_tun: entered allmulticast mode [ 390.740582][T16367] syz_tun: entered promiscuous mode [ 390.814379][T16360] bridge0: port 2(ip6gretap0) entered blocking state [ 390.814499][T16360] bridge0: port 2(ip6gretap0) entered disabled state [ 390.815218][T16360] ip6gretap0: entered allmulticast mode [ 390.832799][T16360] ip6gretap0: entered promiscuous mode [ 391.369827][T16398] 0: reclassify loop, rule prio 0, protocol 03 [ 391.623047][T16411] netlink: 'syz.3.2261': attribute type 10 has an invalid length. [ 391.623070][T16411] __nla_validate_parse: 6 callbacks suppressed [ 391.623081][T16411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2261'. [ 391.623205][T16411] batadv0: entered promiscuous mode [ 391.623221][T16411] batadv0: entered allmulticast mode [ 391.631161][T16411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.631803][T16411] bridge0: port 4(batadv0) entered blocking state [ 391.631911][T16411] bridge0: port 4(batadv0) entered disabled state [ 391.843059][T16420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2263'. [ 391.946181][ T12] wlan1: Trigger new scan to find an IBSS to join [ 391.970477][T16427] netlink: 'syz.1.2265': attribute type 1 has an invalid length. [ 391.989122][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2256'. [ 391.989145][T16384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2256'. [ 391.989159][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2256'. [ 391.989170][T16384] netlink: 'syz.2.2256': attribute type 5 has an invalid length. [ 392.086912][T12548] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 392.086933][T12548] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 392.090208][T16427] macvtap1: entered allmulticast mode [ 392.479609][T16445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2269'. [ 392.537752][T16445] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2269'. [ 392.537811][T16445] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2269'. [ 392.647234][T16445] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2269'. [ 392.647304][T16445] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2269'. [ 392.868287][T12548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.046720][T16479] tipc: Resetting bearer [ 393.131311][T16493] ip6tnl0: Caught tx_queue_len zero misconfig [ 393.232133][T16497] syzkaller1: entered promiscuous mode [ 393.232156][T16497] syzkaller1: entered allmulticast mode [ 393.373196][T16507] netlink: 'syz.3.2281': attribute type 5 has an invalid length. [ 393.552715][T16513] sch_fq: defrate 8 ignored. [ 393.667046][T16516] bond13: entered allmulticast mode [ 393.798654][T16522] bond13: (slave wireguard3): The slave device specified does not support setting the MAC address [ 393.802335][T16522] bond13: (slave wireguard3): Error -95 calling set_mac_address [ 394.321864][T16545] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 394.423570][T16545] syzkaller0: entered promiscuous mode [ 394.423596][T16545] syzkaller0: entered allmulticast mode [ 397.534327][T16576] __nla_validate_parse: 13 callbacks suppressed [ 397.534343][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 397.695201][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.805950][T16593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.891598][T16588] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2298'. [ 397.891637][T16588] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2298'. [ 397.891651][T16588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2298'. [ 397.901755][T16593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.935669][T16612] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2300'. [ 398.052973][T16590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.180161][T16631] netlink: 'syz.4.2303': attribute type 10 has an invalid length. [ 399.220401][T16721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2309'. [ 399.864045][T16740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2315'. [ 400.300847][T16760] ip_tables: iptables: counters copy to user failed while replacing table [ 400.369741][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2320'. [ 400.523499][T16765] veth1_macvtap: left promiscuous mode [ 400.525700][T16765] veth0_macvtap: left promiscuous mode [ 400.532749][T16765] veth0_macvtap: entered promiscuous mode [ 400.539555][T16765] veth1_macvtap: entered promiscuous mode [ 400.570776][T16765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.577537][T16765] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 400.588669][T16765] batadv0: entered promiscuous mode [ 400.589116][T16765] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 400.620287][T16774] xt_hashlimit: size too large, truncated to 1048576 [ 400.629600][T16765] gretap0: entered promiscuous mode [ 400.722318][T16765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.782266][T16765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 400.801179][T16765] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.821534][T16765] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.859752][T16765] 8021q: adding VLAN 0 to HW filter on device bond6 [ 401.015586][T16765] 8021q: adding VLAN 0 to HW filter on device bond8 [ 401.080988][T16765] A link change request failed with some changes committed already. Interface batadv1 may have been left with an inconsistent configuration, please check. [ 401.081089][T10955] bridge0: entered promiscuous mode [ 401.222862][ T12] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 401.223069][ T12] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 401.255495][ T5756] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 401.429430][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.553670][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2324'. [ 401.755365][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2325'. [ 401.755429][T16808] openvswitch: netlink: Message has 8 unknown bytes. [ 401.872370][T16821] vcan1: entered promiscuous mode [ 401.872395][T16821] vcan1: entered allmulticast mode [ 402.015651][T10934] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 402.050204][T16828] vcan1: entered promiscuous mode [ 402.050229][T16828] vcan1: entered allmulticast mode [ 402.196085][ T5756] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 402.380387][T16851] nbd2: detected capacity change from 0 to 63 [ 402.403192][ T4948] block nbd2: Receive control failed (result -104) [ 402.440097][T16855] pim6reg: entered allmulticast mode [ 402.457525][T16855] pim6reg: left allmulticast mode [ 402.606325][T16855] __nla_validate_parse: 5 callbacks suppressed [ 402.606346][T16855] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2331'. [ 402.809342][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 403.151436][T16891] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2341'. [ 403.297329][T16902] vlan1: Caught tx_queue_len zero misconfig [ 403.546142][T16908] netlink: 'syz.1.2344': attribute type 10 has an invalid length. [ 403.549709][T16909] netlink: 'syz.1.2344': attribute type 10 has an invalid length. [ 403.612789][T16908] bridge0: port 2(ip6gretap0) entered disabled state [ 403.613021][T16908] bridge0: port 1(syz_tun) entered disabled state [ 403.697988][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2345'. [ 403.700560][T16912] syzkaller0: entered promiscuous mode [ 403.700580][T16912] syzkaller0: entered allmulticast mode [ 403.715908][T16919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2346'. [ 404.974881][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 405.295133][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 406.248570][T16937] netlink: 'syz.1.2348': attribute type 1 has an invalid length. [ 406.248591][T16937] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2348'. [ 406.248697][T16937] NCSI netlink: No device for ifindex 0 [ 406.342419][T16940] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 406.480369][T16953] netlink: 'syz.4.2351': attribute type 16 has an invalid length. [ 406.480636][T16948] netlink: 'syz.4.2351': attribute type 16 has an invalid length. [ 406.480652][T16948] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2351'. [ 406.482624][T16953] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.2351'. [ 407.230674][T16976] syzkaller0: entered promiscuous mode [ 407.230706][T16976] syzkaller0: entered allmulticast mode [ 408.273050][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 409.264763][ T4962] block nbd2: Connection timed out, retrying (0/1 alive) [ 409.296005][ T4962] block nbd2: Connection timed out, retrying (0/1 alive) [ 409.296072][ T4962] block nbd2: Connection timed out, retrying (0/1 alive) [ 409.296108][ T4962] block nbd2: Connection timed out, retrying (0/1 alive) [ 409.303121][ T4962] block nbd2: Dead connection, failed to find a fallback [ 409.303158][ T4962] block nbd2: shutting down sockets [ 409.303264][ T4962] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 409.303362][ T4962] Buffer I/O error on dev nbd2, logical block 3, async page read [ 409.303617][ T4962] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 409.303642][ T4962] Buffer I/O error on dev nbd2, logical block 2, async page read [ 409.303662][ T4962] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 409.303683][ T4962] Buffer I/O error on dev nbd2, logical block 1, async page read [ 409.303702][ T4962] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 409.303721][ T4962] Buffer I/O error on dev nbd2, logical block 0, async page read [ 409.327416][ T1696] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 409.327452][ T1696] Buffer I/O error on dev nbd2, logical block 0, async page read [ 409.327806][ T1696] Buffer I/O error on dev nbd2, logical block 1, async page read [ 409.327822][ T1696] Buffer I/O error on dev nbd2, logical block 2, async page read [ 409.327836][ T1696] Buffer I/O error on dev nbd2, logical block 3, async page read [ 409.334531][ T1696] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 409.334565][ T1696] Buffer I/O error on dev nbd2, logical block 0, async page read [ 409.334582][ T1696] Buffer I/O error on dev nbd2, logical block 1, async page read [ 409.338137][ T1696] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 409.338301][ T1696] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 409.338472][ T1696] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 409.338634][ T1696] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 409.338829][T16580] ldm_validate_partition_table(): Disk read failed. [ 409.339361][T16580] Dev nbd2: unable to read RDB block 0 [ 409.341714][T16580] nbd2: unable to read partition table [ 409.368544][T16580] ldm_validate_partition_table(): Disk read failed. [ 409.369781][T16580] Dev nbd2: unable to read RDB block 0 [ 409.371217][T16580] nbd2: unable to read partition table [ 410.857745][T17010] tun0: tun_chr_ioctl cmd 1074025681 [ 410.878972][T17023] ipvlan1: entered allmulticast mode [ 411.664294][T17082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 411.868415][T17091] SET target dimension over the limit! [ 411.937422][T17093] [ 411.939793][T17093] ====================================================== [ 411.946831][T17093] WARNING: possible circular locking dependency detected [ 411.953862][T17093] syzkaller #0 Not tainted [ 411.958269][T17093] ------------------------------------------------------ [ 411.965279][T17093] syz.0.2390/17093 is trying to acquire lock: [ 411.971336][T17093] ffff88801d2dca10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x240 [ 411.982009][T17093] [ 411.982009][T17093] but task is already holding lock: [ 411.989374][T17093] ffff88801d2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 411.999008][T17093] [ 411.999008][T17093] which lock already depends on the new lock. [ 411.999008][T17093] [ 412.009421][T17093] [ 412.009421][T17093] the existing dependency chain (in reverse order) is: [ 412.018880][T17093] [ 412.018880][T17093] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 412.026929][T17093] down_write+0x91/0x200 [ 412.031823][T17093] kernfs_add_one+0x41/0x510 [ 412.036961][T17093] kernfs_create_dir_ns+0x18c/0x220 [ 412.042681][T17093] internal_create_group+0x440/0x1180 [ 412.048651][T17093] cpuhp_invoke_callback+0x434/0x810 [ 412.054510][T17093] cpuhp_issue_call+0x3f0/0x750 [ 412.059900][T17093] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 412.066507][T17093] __cpuhp_setup_state+0x3f/0x60 [ 412.072072][T17093] do_one_initcall+0x250/0x870 [ 412.077420][T17093] do_initcall_level+0x10a/0x1a0 [ 412.084178][T17093] do_initcalls+0x59/0xa0 [ 412.089030][T17093] kernel_init_freeable+0x29d/0x3e0 [ 412.095542][T17093] kernel_init+0x22/0x1d0 [ 412.100775][T17093] ret_from_fork+0x514/0xb70 [ 412.106517][T17093] ret_from_fork_asm+0x1a/0x30 [ 412.112502][T17093] [ 412.112502][T17093] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 412.120616][T17093] [ 412.120616][T17093] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 412.130012][T17093] cpus_read_lock+0x3d/0x160 [ 412.135146][T17093] static_key_slow_inc+0x12/0x30 [ 412.140655][T17093] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 412.147036][T17093] nbd_genl_foreach_sock+0x265/0x450 [ 412.152935][T17093] nbd_genl_reconfigure+0xbbb/0x1040 [ 412.158752][T17093] genl_family_rcv_msg_doit+0x233/0x340 [ 412.164981][T17093] genl_rcv_msg+0x614/0x7a0 [ 412.170118][T17093] netlink_rcv_skb+0x226/0x4a0 [ 412.175510][T17093] genl_rcv+0x28/0x40 [ 412.180038][T17093] netlink_unicast+0x8ef/0xa80 [ 412.185343][T17093] netlink_sendmsg+0x7f0/0xb20 [ 412.190644][T17093] sock_sendmsg_nosec+0x14e/0x190 [ 412.196306][T17093] ____sys_sendmsg+0x54e/0x850 [ 412.201657][T17093] ___sys_sendmsg+0x2a5/0x360 [ 412.206858][T17093] __x64_sys_sendmsg+0x1b1/0x290 [ 412.212316][T17093] do_syscall_64+0x166/0x520 [ 412.217423][T17093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.223862][T17093] [ 412.223862][T17093] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 412.231508][T17093] __mutex_lock+0x197/0x15a0 [ 412.236623][T17093] nbd_queue_rq+0x373/0xff0 [ 412.241657][T17093] blk_mq_dispatch_rq_list+0x499/0x1990 [ 412.247853][T17093] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 412.254780][T17093] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 412.261287][T17093] blk_mq_run_work_fn+0x167/0x2f0 [ 412.266871][T17093] process_scheduled_works+0xc3d/0x1630 [ 412.273040][T17093] worker_thread+0xa47/0xfb0 [ 412.278176][T17093] kthread+0x38b/0x480 [ 412.282770][T17093] ret_from_fork+0x514/0xb70 [ 412.287888][T17093] ret_from_fork_asm+0x1a/0x30 [ 412.293174][T17093] [ 412.293174][T17093] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 412.300385][T17093] __mutex_lock+0x197/0x15a0 [ 412.305507][T17093] nbd_queue_rq+0xc1/0xff0 [ 412.310486][T17093] blk_mq_dispatch_rq_list+0x499/0x1990 [ 412.316556][T17093] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 412.323413][T17093] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 412.329965][T17093] blk_mq_run_work_fn+0x167/0x2f0 [ 412.335526][T17093] process_scheduled_works+0xc3d/0x1630 [ 412.341617][T17093] worker_thread+0xa47/0xfb0 [ 412.346806][T17093] kthread+0x38b/0x480 [ 412.351425][T17093] ret_from_fork+0x514/0xb70 [ 412.356596][T17093] ret_from_fork_asm+0x1a/0x30 [ 412.361922][T17093] [ 412.361922][T17093] -> #4 (set->srcu){.+.+}-{0:0}: [ 412.369066][T17093] __synchronize_srcu+0xca/0x2f0 [ 412.374601][T17093] elevator_switch+0x1e8/0x7b0 [ 412.379996][T17093] elevator_change+0x2fa/0x480 [ 412.385443][T17093] elevator_set_default+0x375/0x440 [ 412.391184][T17093] blk_register_queue+0x404/0x4f0 [ 412.396834][T17093] __add_disk+0x6b8/0xdb0 [ 412.401700][T17093] add_disk_fwnode+0x100/0x3a0 [ 412.406995][T17093] nbd_dev_add+0x733/0xb60 [ 412.411949][T17093] nbd_init+0x168/0x1f0 [ 412.416732][T17093] do_one_initcall+0x250/0x870 [ 412.422034][T17093] do_initcall_level+0x10a/0x1a0 [ 412.427507][T17093] do_initcalls+0x59/0xa0 [ 412.432364][T17093] kernel_init_freeable+0x29d/0x3e0 [ 412.438170][T17093] kernel_init+0x22/0x1d0 [ 412.443036][T17093] ret_from_fork+0x514/0xb70 [ 412.448172][T17093] ret_from_fork_asm+0x1a/0x30 [ 412.453466][T17093] [ 412.453466][T17093] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 412.461285][T17093] __mutex_lock+0x197/0x15a0 [ 412.466436][T17093] elevator_change+0x1af/0x480 [ 412.471726][T17093] elevator_set_none+0xb5/0x140 [ 412.477098][T17093] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 412.483431][T17093] nbd_start_device+0x189/0xb30 [ 412.488813][T17093] nbd_genl_connect+0x167d/0x1cd0 [ 412.494364][T17093] genl_family_rcv_msg_doit+0x233/0x340 [ 412.500552][T17093] genl_rcv_msg+0x614/0x7a0 [ 412.505588][T17093] netlink_rcv_skb+0x226/0x4a0 [ 412.510880][T17093] genl_rcv+0x28/0x40 [ 412.515389][T17093] netlink_unicast+0x8ef/0xa80 [ 412.520674][T17093] netlink_sendmsg+0x7f0/0xb20 [ 412.525960][T17093] sock_sendmsg_nosec+0x14e/0x190 [ 412.531514][T17093] ____sys_sendmsg+0x54e/0x850 [ 412.536806][T17093] ___sys_sendmsg+0x2a5/0x360 [ 412.542005][T17093] __x64_sys_sendmsg+0x1b1/0x290 [ 412.547463][T17093] do_syscall_64+0x166/0x520 [ 412.552576][T17093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.559165][T17093] [ 412.559165][T17093] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 412.567804][T17093] blk_alloc_queue+0x544/0x690 [ 412.573094][T17093] __blk_mq_alloc_disk+0x194/0x390 [ 412.578728][T17093] nbd_dev_add+0x494/0xb60 [ 412.583678][T17093] nbd_init+0x168/0x1f0 [ 412.588466][T17093] do_one_initcall+0x250/0x870 [ 412.593765][T17093] do_initcall_level+0x10a/0x1a0 [ 412.599268][T17093] do_initcalls+0x59/0xa0 [ 412.604126][T17093] kernel_init_freeable+0x29d/0x3e0 [ 412.609857][T17093] kernel_init+0x22/0x1d0 [ 412.614797][T17093] ret_from_fork+0x514/0xb70 [ 412.619906][T17093] ret_from_fork_asm+0x1a/0x30 [ 412.625195][T17093] [ 412.625195][T17093] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 412.632402][T17093] fs_reclaim_acquire+0x71/0x100 [ 412.637908][T17093] kmem_cache_alloc_noprof+0x5f/0x600 [ 412.643803][T17093] __kernfs_iattrs+0xdd/0x380 [ 412.649014][T17093] kernfs_iop_setattr+0xe6/0x3f0 [ 412.654481][T17093] notify_change+0xbba/0xea0 [ 412.659623][T17093] do_truncate+0x1c2/0x250 [ 412.664579][T17093] path_openat+0x18a6/0x20f0 [ 412.669697][T17093] do_file_open+0x23e/0x4a0 [ 412.674744][T17093] do_sys_openat2+0x115/0x200 [ 412.679948][T17093] __x64_sys_openat+0x138/0x170 [ 412.685323][T17093] do_syscall_64+0x166/0x520 [ 412.690431][T17093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.696849][T17093] [ 412.696849][T17093] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 412.705373][T17093] __lock_acquire+0x164c/0x2de0 [ 412.710786][T17093] lock_acquire+0x115/0x350 [ 412.715807][T17093] down_write+0x91/0x200 [ 412.720570][T17093] kernfs_unlink_sibling+0x6d/0x240 [ 412.726293][T17093] kernfs_rename_ns+0x575/0x9e0 [ 412.731666][T17093] sysfs_rename_link_ns+0x16e/0x1b0 [ 412.737392][T17093] device_rename+0x110/0x210 [ 412.742604][T17093] ib_device_rename+0x2ea/0x750 [ 412.748234][T17093] nldev_set_doit+0x3c5/0x5f0 [ 412.753502][T17093] rdma_nl_rcv+0x6ef/0xa40 [ 412.758491][T17093] netlink_unicast+0x8ef/0xa80 [ 412.763814][T17093] netlink_sendmsg+0x7f0/0xb20 [ 412.769105][T17093] sock_sendmsg_nosec+0x14e/0x190 [ 412.774690][T17093] ____sys_sendmsg+0x54e/0x850 [ 412.779988][T17093] ___sys_sendmsg+0x2a5/0x360 [ 412.785192][T17093] __x64_sys_sendmsg+0x1b1/0x290 [ 412.790650][T17093] do_syscall_64+0x166/0x520 [ 412.795760][T17093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.802171][T17093] [ 412.802171][T17093] other info that might help us debug this: [ 412.802171][T17093] [ 412.812391][T17093] Chain exists of: [ 412.812391][T17093] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 412.812391][T17093] [ 412.826830][T17093] Possible unsafe locking scenario: [ 412.826830][T17093] [ 412.834282][T17093] CPU0 CPU1 [ 412.839648][T17093] ---- ---- [ 412.845009][T17093] lock(&root->kernfs_rwsem); [ 412.849785][T17093] lock(cpuhp_state_mutex); [ 412.856900][T17093] lock(&root->kernfs_rwsem); [ 412.864185][T17093] lock(&root->kernfs_iattr_rwsem); [ 412.869474][T17093] [ 412.869474][T17093] *** DEADLOCK *** [ 412.869474][T17093] [ 412.877616][T17093] locks held by syz.0.2390/17093: 3, last CPU#1: [ 412.883941][T17093] #0: ffffffff9bdf0a48 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 412.893961][T17093] #1: ffffffff90fcc448 (devices_rwsem){++++}-{4:4}, at: ib_device_rename+0x88/0x750 [ 412.903547][T17093] #2: ffff88801d2dc980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 412.913567][T17093] [ 412.913567][T17093] stack backtrace: [ 412.919475][T17093] CPU: 1 UID: 0 PID: 17093 Comm: syz.0.2390 Not tainted syzkaller #0 PREEMPT(full) [ 412.928845][T17093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 412.938922][T17093] Call Trace: [ 412.942266][T17093] [ 412.945208][T17093] dump_stack_lvl+0xe8/0x150 [ 412.949819][T17093] print_circular_bug+0x2e2/0x300 [ 412.954874][T17093] check_noncircular+0x12f/0x150 [ 412.959868][T17093] __lock_acquire+0x164c/0x2de0 [ 412.964765][T17093] ? __lock_acquire+0x747/0x2de0 [ 412.969787][T17093] ? __lock_acquire+0x747/0x2de0 [ 412.974738][T17093] lock_acquire+0x115/0x350 [ 412.979260][T17093] ? kernfs_unlink_sibling+0x6d/0x240 [ 412.984649][T17093] down_write+0x91/0x200 [ 412.988920][T17093] ? kernfs_unlink_sibling+0x6d/0x240 [ 412.994303][T17093] ? __pfx_down_write+0x10/0x10 [ 412.999164][T17093] ? kernfs_root+0x1c/0x230 [ 413.003682][T17093] ? kernfs_root+0x1c/0x230 [ 413.008205][T17093] ? kernfs_root+0x1ea/0x230 [ 413.012854][T17093] kernfs_unlink_sibling+0x6d/0x240 [ 413.018073][T17093] kernfs_rename_ns+0x575/0x9e0 [ 413.022946][T17093] sysfs_rename_link_ns+0x16e/0x1b0 [ 413.028175][T17093] device_rename+0x110/0x210 [ 413.032774][T17093] ib_device_rename+0x2ea/0x750 [ 413.037649][T17093] ? __pfx_ib_device_rename+0x10/0x10 [ 413.043025][T17093] ? ib_device_get_by_index+0x1e7/0x270 [ 413.048671][T17093] ? nla_strscpy+0x10f/0x170 [ 413.053399][T17093] nldev_set_doit+0x3c5/0x5f0 [ 413.058134][T17093] ? __pfx_nldev_set_doit+0x10/0x10 [ 413.063403][T17093] ? hook_capable+0x1c3/0x5e0 [ 413.068328][T17093] ? arch_stack_walk+0xfb/0x150 [ 413.073206][T17093] ? __pfx_hook_capable+0x10/0x10 [ 413.078228][T17093] ? __pfx_hook_capable+0x10/0x10 [ 413.083315][T17093] ? bpf_lsm_capable+0x9/0x20 [ 413.088753][T17093] ? security_capable+0x7e/0x2c0 [ 413.093815][T17093] ? __pfx_nldev_set_doit+0x10/0x10 [ 413.095694][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 413.106646][T17093] rdma_nl_rcv+0x6ef/0xa40 [ 413.111082][T17093] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 413.116028][T17093] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.121237][T17093] ? netlink_deliver_tap+0x2e/0x1b0 [ 413.126443][T17093] netlink_unicast+0x8ef/0xa80 [ 413.131218][T17093] netlink_sendmsg+0x7f0/0xb20 [ 413.136014][T17093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.141344][T17093] ? aa_sock_msg_perm+0x144/0x210 [ 413.146499][T17093] ? apparmor_socket_sendmsg+0x98/0x360 [ 413.152142][T17093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.157470][T17093] sock_sendmsg_nosec+0x14e/0x190 [ 413.162514][T17093] ____sys_sendmsg+0x54e/0x850 [ 413.167288][T17093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.172588][T17093] ? import_iovec+0x73/0xa0 [ 413.177208][T17093] ___sys_sendmsg+0x2a5/0x360 [ 413.181968][T17093] ? __lock_acquire+0x747/0x2de0 [ 413.187406][T17093] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.192638][T17093] ? futex_wait+0x2a2/0x390 [ 413.197384][T17093] ? __fget_files+0x3a2/0x420 [ 413.203021][T17093] ? __fget_files+0x2a/0x420 [ 413.207611][T17093] __x64_sys_sendmsg+0x1b1/0x290 [ 413.213068][T17093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 413.218573][T17093] do_syscall_64+0x166/0x520 [ 413.223214][T17093] ? trace_irq_disable+0x3b/0x140 [ 413.228288][T17093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.234805][T17093] ? clear_bhb_loop+0x70/0xc0 [ 413.239480][T17093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.245390][T17093] RIP: 0033:0x7f419b99f559 [ 413.249850][T17093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.269485][T17093] RSP: 002b:00007f419c924028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.277928][T17093] RAX: ffffffffffffffda RBX: 00007f419bc25fa0 RCX: 00007f419b99f559 [ 413.285916][T17093] RDX: 0000000000000800 RSI: 0000200000000540 RDI: 0000000000000003 [ 413.293896][T17093] RBP: 00007f419ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 413.301878][T17093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.309862][T17093] R13: 00007f419bc26038 R14: 00007f419bc25fa0 R15: 00007ffc76458cd8 [ 413.317853][T17093] [ 413.356281][T17093] smbdirect: ib_dev[rxe0] renamed to [syz2] [ 413.694910][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!