last executing test programs: 5.778812851s ago: executing program 4 (id=6212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x80}]}}]}, 0x3c}}, 0x0) 5.594716541s ago: executing program 3 (id=6213): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r2, 0x6281}], 0x1, 0x0, 0x0, 0x0) 4.636575465s ago: executing program 1 (id=6217): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) sendmmsg$inet(r0, &(0x7f0000004200)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="ae83d7", 0x3}], 0x1}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000040)='@', 0x1, 0x20044890, &(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10) 4.158391824s ago: executing program 3 (id=6218): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffff, 0x7fff, 0x0, 0x81, 0x8, 0xd40}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r0, 0xc252d000) 3.798417071s ago: executing program 0 (id=6219): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="82", 0x1}, {&(0x7f0000000280)="f677", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3.779586626s ago: executing program 2 (id=6220): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 3.559673273s ago: executing program 4 (id=6221): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800004000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x4, 0xfffffffd) 3.386847291s ago: executing program 1 (id=6222): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3.047074941s ago: executing program 3 (id=6223): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) 2.85144026s ago: executing program 0 (id=6224): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000080)=0x80000000, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 2.668982313s ago: executing program 2 (id=6225): socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x14000085}, 0x20040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c000180080001"], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 2.562337365s ago: executing program 4 (id=6226): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd700004ddfffb040000000800090002"], 0x3c}}, 0x20) 2.525208599s ago: executing program 1 (id=6227): getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f0000000140)) 2.419395105s ago: executing program 0 (id=6228): socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9ff06ffffaf64000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl(0xffffffffffffffff, 0x40104d01, &(0x7f0000000a00)="000002de011a7e34fa") 2.410027513s ago: executing program 3 (id=6229): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write(r0, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) 2.283545493s ago: executing program 1 (id=6230): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb29d453e94df581d7575dd5b7ff0f58e200", '\x00\t\x00', "1f00000000000080"}, 0x38) writev(r0, &(0x7f0000001580)=[{&(0x7f00000000c0)="81454920f4355b30bdcac3903eea1ab1c967", 0x12}, {&(0x7f0000000100)="f19b4cfeaddd0a9327aac595a43dcc7a8529acc13185", 0x16}, {&(0x7f0000001880)="d6e53f92715a3e0d76d37844c967dab58b012b9d4e4a9946469d94f363e1d8ee09b57f2851b6b0e1a940560dacf2d90b8f558385afb5a89fa6de574859bc08bc0e9ea023193263b2c5b5127d42b8b342acebc45f88516612e1", 0x59}], 0x3) 2.173900669s ago: executing program 2 (id=6231): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.041092s ago: executing program 4 (id=6232): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) read$nci(r0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) 1.714601601s ago: executing program 0 (id=6233): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e22, 0x100, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 1.701600479s ago: executing program 1 (id=6234): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) 1.659694893s ago: executing program 2 (id=6235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000480), &(0x7f0000000540)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.609211498s ago: executing program 3 (id=6236): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000600)=[{&(0x7f0000002540)=""/4108, 0x100c}, {&(0x7f0000000640)=""/150, 0x96}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.071410535s ago: executing program 4 (id=6237): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000900)="16", 0x1, 0x240050d4, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) 996.308025ms ago: executing program 2 (id=6238): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0xa20, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 992.170378ms ago: executing program 1 (id=6239): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x0, 0x800010100000}, 0x0, &(0x7f00000000c0)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 951.07348ms ago: executing program 0 (id=6240): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @private1, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001, 0x0, 0x5}}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f00000004c0), 0x52, 0x4) 796.002739ms ago: executing program 3 (id=6241): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 742.415169ms ago: executing program 4 (id=6242): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 90.618293ms ago: executing program 2 (id=6243): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r3, 0x20, &(0x7f00000007c0)={&(0x7f0000000740)=""/51, 0x33, 0x0, 0x0}}, 0x10) 0s ago: executing program 0 (id=6244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48046}, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x8c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x1f90}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0xfffffffc}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x1f90}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x8c}}, 0x0) kernel console output (not intermixed with test programs): h an up link [ 91.982982][ T5679] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.983075][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.983431][ T5679] bridge_slave_1: entered allmulticast mode [ 91.984970][ T5679] bridge_slave_1: entered promiscuous mode [ 92.016562][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.037171][ T190] cfg80211: failed to load regulatory.db [ 92.075069][ T5700] team0: Port device team_slave_0 added [ 92.124226][ T5700] team0: Port device team_slave_1 added [ 92.141189][ T5678] team0: Port device team_slave_0 added [ 92.152077][ T5695] team0: Port device team_slave_0 added [ 92.170848][ T5679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.191247][ T5678] team0: Port device team_slave_1 added [ 92.196305][ T5695] team0: Port device team_slave_1 added [ 92.214942][ T5679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.256449][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.256612][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.256708][ T5676] bridge_slave_0: entered allmulticast mode [ 92.257997][ T5676] bridge_slave_0: entered promiscuous mode [ 92.294391][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.294404][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.294430][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.363981][ T5676] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.364086][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.364489][ T5676] bridge_slave_1: entered allmulticast mode [ 92.366240][ T5676] bridge_slave_1: entered promiscuous mode [ 92.399219][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.399236][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.399264][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.410729][ T5679] team0: Port device team_slave_0 added [ 92.411873][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.411916][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.411984][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.425641][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.425686][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.425752][ T5695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.544105][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.544122][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.544149][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.552065][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.552082][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.552107][ T5695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.608763][ T5679] team0: Port device team_slave_1 added [ 92.655864][ T5676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.687061][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.687078][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.687102][ T5679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.689074][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.689088][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.689111][ T5679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.692033][ T5676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.846736][ T5695] hsr_slave_0: entered promiscuous mode [ 92.847570][ T5695] hsr_slave_1: entered promiscuous mode [ 92.876734][ T5678] hsr_slave_0: entered promiscuous mode [ 92.877884][ T5678] hsr_slave_1: entered promiscuous mode [ 92.878562][ T5678] debugfs: 'hsr0' already exists in 'hsr' [ 92.878648][ T5678] Cannot create hsr debugfs directory [ 92.915375][ T5700] hsr_slave_0: entered promiscuous mode [ 92.916264][ T5700] hsr_slave_1: entered promiscuous mode [ 92.916861][ T5700] debugfs: 'hsr0' already exists in 'hsr' [ 92.916890][ T5700] Cannot create hsr debugfs directory [ 92.954485][ T5676] team0: Port device team_slave_0 added [ 93.004852][ T5676] team0: Port device team_slave_1 added [ 93.026061][ T5679] hsr_slave_0: entered promiscuous mode [ 93.026889][ T5679] hsr_slave_1: entered promiscuous mode [ 93.027491][ T5679] debugfs: 'hsr0' already exists in 'hsr' [ 93.027514][ T5679] Cannot create hsr debugfs directory [ 93.152690][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.152709][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.152736][ T5676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.211623][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.211640][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.211663][ T5676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.214765][ T5686] Bluetooth: hci1: command tx timeout [ 93.214855][ T5686] Bluetooth: hci0: command tx timeout [ 93.214921][ T5686] Bluetooth: hci2: command tx timeout [ 93.443735][ T52] Bluetooth: hci3: command tx timeout [ 93.499779][ T5676] hsr_slave_0: entered promiscuous mode [ 93.500620][ T5676] hsr_slave_1: entered promiscuous mode [ 93.501156][ T5676] debugfs: 'hsr0' already exists in 'hsr' [ 93.501176][ T5676] Cannot create hsr debugfs directory [ 93.682587][ T52] Bluetooth: hci4: command tx timeout [ 93.763192][ T5678] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.770140][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.793434][ T5678] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.798244][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.830954][ T5678] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.843980][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.865489][ T5678] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.870183][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.944969][ T5695] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.950901][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.952176][ T5695] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.977999][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.978924][ T5695] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.998034][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.002127][ T5695] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.019185][ T5695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.125973][ T5700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.130678][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.131589][ T5700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.154294][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.174212][ T5700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.179727][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.213811][ T5700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.217187][ T5700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.220128][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.324484][ T5678] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.348366][ T5679] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.351472][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.368871][ T5679] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.380742][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.396760][ T5679] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.401566][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.436340][ T5679] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.440020][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.458179][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.458519][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.502245][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.502437][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.598458][ T5676] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.602812][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.621279][ T5695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.633674][ T5676] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.638053][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.640412][ T5676] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.667411][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.688292][ T5676] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.691302][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.776714][ T5695] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.813515][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.813627][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.866779][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.866890][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.960935][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.045935][ T5679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.067773][ T5695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.083680][ T5700] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.108765][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.108842][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.150771][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.150881][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.180897][ T5679] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.261436][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.261550][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.284620][ T5686] Bluetooth: hci0: command tx timeout [ 95.284643][ T4935] Bluetooth: hci1: command tx timeout [ 95.287336][ T52] Bluetooth: hci2: command tx timeout [ 95.311814][ T5676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.327970][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.328078][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.469873][ T5676] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.523077][ T52] Bluetooth: hci3: command tx timeout [ 95.540267][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.540546][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.578872][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.579007][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.760156][ T5676] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.773280][ T52] Bluetooth: hci4: command tx timeout [ 95.931170][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.248086][ T5678] veth0_vlan: entered promiscuous mode [ 96.339159][ T5678] veth1_vlan: entered promiscuous mode [ 96.522228][ T5695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.529420][ T5678] veth0_macvtap: entered promiscuous mode [ 96.558095][ T5678] veth1_macvtap: entered promiscuous mode [ 96.655210][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.674620][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.721859][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.887160][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.887806][ T1196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.887995][ T1196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.888169][ T1196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.890256][ T5695] veth0_vlan: entered promiscuous mode [ 96.999969][ T5695] veth1_vlan: entered promiscuous mode [ 97.158216][ T5679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.261980][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.262004][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.301677][ T5676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.318301][ T5695] veth0_macvtap: entered promiscuous mode [ 97.359088][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.359109][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.368007][ T52] Bluetooth: hci2: command tx timeout [ 97.368111][ T52] Bluetooth: hci0: command tx timeout [ 97.377723][ T5686] Bluetooth: hci1: command tx timeout [ 97.398415][ T5695] veth1_macvtap: entered promiscuous mode [ 97.444059][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.481415][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.536514][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.595607][ T5679] veth0_vlan: entered promiscuous mode [ 97.605450][ T5686] Bluetooth: hci3: command tx timeout [ 97.640536][ T5700] veth0_vlan: entered promiscuous mode [ 97.656295][ T5676] veth0_vlan: entered promiscuous mode [ 97.681707][ T5679] veth1_vlan: entered promiscuous mode [ 97.713643][ T5700] veth1_vlan: entered promiscuous mode [ 97.720183][ T5676] veth1_vlan: entered promiscuous mode [ 97.836027][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.836100][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.845072][ T5686] Bluetooth: hci4: command tx timeout [ 97.966316][ T5679] veth0_macvtap: entered promiscuous mode [ 97.999940][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.999964][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.019327][ T5679] veth1_macvtap: entered promiscuous mode [ 98.039288][ T5700] veth0_macvtap: entered promiscuous mode [ 98.058634][ T5676] veth0_macvtap: entered promiscuous mode [ 98.070404][ T5700] veth1_macvtap: entered promiscuous mode [ 98.085340][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.109574][ T5676] veth1_macvtap: entered promiscuous mode [ 98.186446][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.186469][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.226337][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.232084][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.279129][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.281640][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.306395][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.355904][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.427960][ T1115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.433000][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.438602][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.438747][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.438854][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.438957][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.439057][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.439215][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.602521][ T1196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.602571][ T1196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.602609][ T1196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.602647][ T1196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.835159][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.835180][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.950168][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.950194][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.067822][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.067862][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.149403][ T5686] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10 [ 99.149433][ T5686] Bluetooth: unknown link type 48 [ 99.149482][ T5686] Bluetooth: hci3: connection err: -111 [ 99.197388][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.197411][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.355434][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.355456][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.449932][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.449955][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.114213][ T5948] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 101.441008][ T5686] Bluetooth: hci3: unexpected event 0x05 length: 5 > 4 [ 105.222301][ T6253] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 105.365782][ T6259] IPv6: addrconf: prefix option has invalid lifetime [ 106.681919][ T6343] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 110.983674][ T5686] Bluetooth: hci1: ISO packet for unknown connection handle 2723 [ 116.469268][ T5686] Bluetooth: hci1: SCO packet too small [ 121.137543][ T5686] Bluetooth: hci0: unexpected event 0x13 length: 321 > 255 [ 122.460205][ T5686] Bluetooth: hci4: ISO packet too small [ 123.005924][ T5686] Bluetooth: hci0: unexpected cc 0x2060 length: 8 > 7 [ 123.359954][ T7297] IPv6: addrconf: prefix option has invalid lifetime [ 123.359975][ T7297] IPv6: addrconf: prefix option has invalid lifetime [ 123.551077][ T5686] Bluetooth: hci2: ACL packet for unknown connection handle 3484 [ 127.458663][ T5686] Bluetooth: hci4: ACL packet too small [ 130.231679][ T5686] Bluetooth: hci1: Malformed HCI Event [ 130.827878][ T5686] Bluetooth: hci3: connection err: -111 [ 132.490282][ T5686] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 132.967132][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.967228][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.707907][ T7990] sock: sock_timestamping_bind_phc: sock not bind to device [ 137.442009][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1091'. [ 137.442067][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1091'. [ 137.774762][ T8041] veth1_macvtap: left promiscuous mode [ 138.133876][ T8054] netlink: 'syz.2.1104': attribute type 2 has an invalid length. [ 138.842478][ T8090] netlink: 'syz.4.1119': attribute type 21 has an invalid length. [ 138.842503][ T8090] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1119'. [ 138.842645][ T8090] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1119'. [ 139.940972][ T8135] veth0_macvtap: entered allmulticast mode [ 139.941122][ T8135] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 139.967296][ T5280] veth1_macvtap: entered promiscuous mode [ 140.406970][ T8160] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1149'. [ 141.428144][ T8208] geneve2: entered allmulticast mode [ 141.549128][ T8214] netlink: 'syz.2.1171': attribute type 2 has an invalid length. [ 141.549152][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1171'. [ 142.255980][ T8254] ipt_ECN: cannot use operation on non-tcp rule [ 143.044881][ T8289] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.138806][ T8286] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 143.138848][ T8286] bond1: option packets_per_slave: allowed values 0 - 65535 [ 143.322924][ T8286] bond1 (unregistering): Released all slaves [ 143.419936][ T8291] warning: `syz.2.1207' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.613665][ T8311] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 143.765152][ T8319] netlink: 'syz.1.1219': attribute type 12 has an invalid length. [ 143.898773][ T8325] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 143.922822][ T8325] bond1 (unregistering): Released all slaves [ 144.149471][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1228'. [ 144.560523][ T8364] netlink: 'syz.2.1240': attribute type 49 has an invalid length. [ 144.688863][ T8364] ip6gretap0: entered promiscuous mode [ 144.688889][ T8364] ip6gretap0: entered allmulticast mode [ 145.082053][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 145.981605][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 145.981654][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 145.981743][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 146.271981][ T8458] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 146.699108][ T8478] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 146.699155][ T8478] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 146.699214][ T8478] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 146.830150][ T8478] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.864033][ T8478] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 147.167653][ T8501] netlink: 'syz.2.1285': attribute type 2 has an invalid length. [ 147.167679][ T8501] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1285'. [ 147.476342][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'. [ 147.476372][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1291'. [ 147.476406][ T8517] netlink: 'syz.2.1291': attribute type 3 has an invalid length. [ 147.823683][ T8538] netlink: 'syz.2.1302': attribute type 1 has an invalid length. [ 147.823707][ T8538] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1302'. [ 149.177752][ T8602] xt_NETMAP: bad rangesize 37. [ 149.239177][ T8606] openvswitch: netlink: IPv4 tun info is not correct [ 149.303197][ T8610] tc_dump_action: action bad kind [ 149.476485][ T8621] netlink: 'syz.0.1340': attribute type 7 has an invalid length. [ 149.507770][ T8622] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.695192][ T8632] netlink: 'syz.1.1346': attribute type 2 has an invalid length. [ 149.695219][ T8632] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1346'. [ 149.703520][ T8635] netlink: 'syz.4.1344': attribute type 8 has an invalid length. [ 149.823130][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 149.898440][ T8644] netlink: ct_mark mask cannot be 0 [ 149.898476][ T8644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.121042][ T8656] netlink: 'syz.3.1361': attribute type 21 has an invalid length. [ 150.168123][ T8656] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 150.184938][ T8656] bond1 (unregistering): Released all slaves [ 150.478360][ T8673] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1365'. [ 151.008718][ T8711] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1387'. [ 151.465939][ T8743] netlink: 'syz.1.1401': attribute type 4 has an invalid length. [ 151.776658][ T8763] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 152.067548][ T8780] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 153.884706][ T8883] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.980610][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1460'. [ 154.030235][ T8889] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1461'. [ 154.166818][ T8898] netlink: 'syz.4.1463': attribute type 10 has an invalid length. [ 154.167113][ T8898] veth1_macvtap: left promiscuous mode [ 154.204597][ T8898] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 154.354750][ T8907] netlink: 'syz.0.1466': attribute type 6 has an invalid length. [ 154.563569][ T8920] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1471'. [ 154.948397][ T8939] syz.4.1478 uses obsolete (PF_INET,SOCK_PACKET) [ 154.949638][ T8937] netlink: 'syz.3.1477': attribute type 21 has an invalid length. [ 154.949662][ T8937] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1477'. [ 154.949737][ T8937] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1477'. [ 155.071938][ T8942] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 155.434749][ T8963] Cannot find del_set index 0 as target [ 155.517554][ T974] IPVS: starting estimator thread 0... [ 155.602458][ T8974] IPVS: using max 24 ests per chain, 57600 per kthread [ 156.146351][ T9012] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 156.461179][ T9026] netlink: 'syz.4.1521': attribute type 2 has an invalid length. [ 156.543081][ T9026] : entered promiscuous mode [ 156.741176][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'. [ 156.741222][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'. [ 156.940265][ T9057] nft_compat: unsupported protocol 0 [ 156.961899][ T9058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1532'. [ 157.153592][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1536'. [ 157.430509][ T9087] netlink: 'syz.0.1548': attribute type 1 has an invalid length. [ 157.430534][ T9087] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1548'. [ 157.430575][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 157.894769][ T9115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.150940][ T9183] netlink: 'syz.0.1590': attribute type 21 has an invalid length. [ 159.151025][ T9183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1590'. [ 159.412060][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 159.507164][ T9201] x_tables: duplicate entry at hook 3 [ 161.201661][ T9300] lo: entered promiscuous mode [ 161.237829][ T9300] tunl0: entered promiscuous mode [ 161.257600][ T9300] gre0: entered promiscuous mode [ 161.418099][ T9300] gretap0: entered promiscuous mode [ 161.489656][ T9300] erspan0: entered promiscuous mode [ 161.512928][ T9300] ip_vti0: entered promiscuous mode [ 161.886825][ T9332] ip6gre2: entered promiscuous mode [ 162.007502][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1653'. [ 162.085184][ T9304] infiniband syz0: set active [ 162.085207][ T9304] infiniband syz0: added bond_slave_1 [ 162.147107][ T9304] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 162.147158][ T9304] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 162.147202][ T9304] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 162.239037][ T9304] RDS/IB: syz0: added [ 162.239609][ T9304] smc: adding ib device syz0 with port count 1 [ 162.239722][ T9304] smc: ib device syz0 port 1 has no pnetid [ 162.429971][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 162.815086][ T9366] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1669'. [ 162.818885][ T9366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.253241][ T9388] netlink: 'syz.0.1676': attribute type 21 has an invalid length. [ 163.605449][ T9398] xt_CT: No such helper "pptp" [ 163.906118][ T9417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1689'. [ 163.906143][ T9417] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1689'. [ 164.821239][ T9417] veth5: entered promiscuous mode [ 165.391851][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1707'. [ 166.209762][ T9492] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 166.518640][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 166.518687][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 166.556258][ T9508] xt_ecn: cannot match TCP bits for non-tcp packets [ 167.372864][ T9559] xt_nfacct: accounting object `syz0' does not exist [ 167.555286][ T9569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 167.765368][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 168.036766][ T9594] bond1: option resend_igmp: invalid value (32767) [ 168.036794][ T9594] bond1: option resend_igmp: allowed values 0 - 255 [ 168.048419][ T9594] bond1 (unregistering): Released all slaves [ 168.508634][ T9625] netlink: 'syz.0.1791': attribute type 4 has an invalid length. [ 168.592445][ T9633] xt_limit: Overflow, try lower: 536871034/127 [ 168.658298][ T9635] xt_TCPMSS: Only works on TCP SYN packets [ 168.696735][ T9637] pimreg: entered allmulticast mode [ 169.507800][ T9688] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 170.035144][ T9724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.346452][ T9745] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1848'. [ 170.534855][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 170.616466][ T9761] netlink: 'syz.4.1857': attribute type 5 has an invalid length. [ 170.762379][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1860'. [ 170.889442][ T9776] netlink: 'syz.1.1867': attribute type 1 has an invalid length. [ 170.889468][ T9776] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1867'. [ 171.003127][ T9785] SET target dimension over the limit! [ 171.914365][ T9836] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 172.211612][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1902'. [ 172.572515][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1916'. [ 172.994543][ T9904] : renamed from bond_slave_0 (while UP) [ 173.013519][ T9908] netlink: 'syz.3.1930': attribute type 1 has an invalid length. [ 174.126585][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.482981][ T9986] dvmrp0: entered allmulticast mode [ 174.742039][T10001] netlink: 'syz.4.1975': attribute type 29 has an invalid length. [ 174.934985][T10011] sctp: [Deprecated]: syz.4.1979 (pid 10011) Use of int in max_burst socket option. [ 174.934985][T10011] Use struct sctp_assoc_value instead [ 175.326417][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1994'. [ 175.436246][T10045] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1996'. [ 175.436276][T10045] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1996'. [ 175.798188][T10066] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.080507][T10085] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.127786][T10087] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2015'. [ 176.424498][T10108] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2025'. [ 176.926060][T10138] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 176.926094][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2040'. [ 176.926109][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2040'. [ 177.146813][T10150] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 177.389968][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2056'. [ 177.390003][T10170] netlink: 'syz.0.2056': attribute type 5 has an invalid length. [ 177.390019][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2056'. [ 177.448536][T10170] geneve2: entered promiscuous mode [ 177.448573][T10170] geneve2: entered allmulticast mode [ 177.473974][ T974] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 177.474023][ T974] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 177.474067][ T974] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 177.474102][ T974] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 177.608659][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2060'. [ 177.779103][T10186] netlink: 'syz.0.2062': attribute type 10 has an invalid length. [ 177.818615][T10186] team0: Device veth0_macvtap failed to register rx_handler [ 177.853779][T10193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2068'. [ 177.853813][T10193] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 178.042157][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2075'. [ 178.307969][T10217] IPv6: sit1: Disabled Multicast RS [ 179.234562][T10279] netlink: 'syz.4.2109': attribute type 9 has an invalid length. [ 179.827636][T10313] netlink: 'syz.1.2125': attribute type 64 has an invalid length. [ 179.827663][T10313] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2125'. [ 180.000338][T10325] netlink: 'syz.1.2131': attribute type 3 has an invalid length. [ 180.304539][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2141'. [ 181.258392][T10407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.642062][T10484] netlink: 'syz.0.2206': attribute type 2 has an invalid length. [ 182.930079][T10494] netlink: 'syz.2.2212': attribute type 4 has an invalid length. [ 183.383446][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2220'. [ 183.742919][T10531] netlink: Conntrack attr has 4 unknown bytes [ 183.742958][T10531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.944689][ T5686] Bluetooth: hci0: unexpected event 0x04 length: 17 > 10 [ 183.944716][ T5686] Bluetooth: unknown link type 128 [ 183.990517][T10544] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 184.238014][T10560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2241'. [ 184.859423][T10595] bond1 (unregistering): Released all slaves [ 186.002590][ T5686] Bluetooth: hci0: command tx timeout [ 186.006141][T10667] netlink: 'syz.4.2291': attribute type 2 has an invalid length. [ 186.006163][T10667] netlink: 'syz.4.2291': attribute type 11 has an invalid length. [ 186.006177][T10667] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2291'. [ 186.195917][T10678] ip6t_rt: unknown flags 36 [ 186.307209][T10635] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.307235][T10635] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 186.446170][T10635] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.446195][T10635] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 186.519976][T10635] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.520001][T10635] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 186.608471][T10635] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.608498][T10635] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 186.686922][T10635] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 186.686950][T10635] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 188.727953][T10801] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.749598][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2343'. [ 188.919456][T10816] Cannot find add_set index 65532 as target [ 189.104069][T10820] x_tables: duplicate underflow at hook 3 [ 189.155096][T10825] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 189.370815][T10835] netlink: 'syz.1.2356': attribute type 1 has an invalid length. [ 189.370842][T10835] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2356'. [ 189.726554][T10857] netlink: 'syz.4.2366': attribute type 1 has an invalid length. [ 189.898719][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2368'. [ 189.998650][T10873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2372'. [ 190.094987][T10875] netlink: 'syz.0.2373': attribute type 1 has an invalid length. [ 190.095013][T10875] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2373'. [ 190.311916][T10892] openvswitch: netlink: IP tunnel dst address not specified [ 190.506622][T10905] openvswitch: netlink: Key type 30 is not supported [ 190.952041][T10930] siw: device registration error -23 [ 190.995869][T10938] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2399'. [ 191.333625][T10955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.579847][T10969] netlink: 'syz.3.2412': attribute type 2 has an invalid length. [ 191.807223][T10983] SET target dimension over the limit! [ 191.985266][T10995] ip_tables: iptables: counters copy to user failed while replacing table [ 192.211744][T11008] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 192.307314][T11011] rdma_rxe: rxe_newlink: failed to add netdevsim0 [ 193.029324][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2448'. [ 193.098407][T11060] nftables ruleset with unbound chain [ 193.438091][T11078] xt_ecn: cannot match TCP bits for non-tcp packets [ 193.491837][T11083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2460'. [ 193.541594][T11084] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 193.789462][T11091] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.790034][T11091] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.790180][T11091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.160837][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 194.405714][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.405776][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.762844][T11163] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 194.893770][T11171] netlink: 'syz.2.2503': attribute type 2 has an invalid length. [ 195.095690][T11183] netlink: 'syz.0.2508': attribute type 7 has an invalid length. [ 195.633740][T11219] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2525'. [ 195.943598][T11237] netlink: 'syz.1.2535': attribute type 1 has an invalid length. [ 196.388601][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2552'. [ 196.498982][T11275] netlink: 'syz.3.2555': attribute type 4 has an invalid length. [ 196.559437][T11277] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 196.675220][T11286] netlink: 'syz.0.2561': attribute type 2 has an invalid length. [ 196.675540][T11282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.015560][T11304] IPVS: length: 239 != 24 [ 197.037113][T11310] xt_TCPMSS: Only works on TCP SYN packets [ 197.248022][T11323] gtp0: entered promiscuous mode [ 197.248047][T11323] gtp0: entered allmulticast mode [ 197.248842][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2580'. [ 197.661624][T11346] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 198.580300][T11393] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2614'. [ 198.717657][T11402] netlink: 'syz.0.2617': attribute type 1 has an invalid length. [ 198.881137][T11409] netlink: 'syz.3.2622': attribute type 2 has an invalid length. [ 199.094563][T11419] dvmrp0: entered allmulticast mode [ 199.100356][T11422] ipt_rpfilter: unknown options [ 199.186943][T11427] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 199.657100][T11458] netlink: 'syz.4.2645': attribute type 3 has an invalid length. [ 199.895475][T11473] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2655'. [ 199.925071][T11472] bond1: entered promiscuous mode [ 199.927309][T11472] bond1: entered allmulticast mode [ 199.928960][T11472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.930493][T11473] 0·: renamed from hsr0 (while UP) [ 199.958964][T11473] 0·: entered allmulticast mode [ 199.958990][T11473] hsr_slave_0: entered allmulticast mode [ 199.959021][T11473] hsr_slave_1: entered allmulticast mode [ 199.959510][T11473] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 200.109706][T11481] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2657'. [ 200.271948][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2661'. [ 200.271998][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2661'. [ 200.549481][T11511] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2670'. [ 200.690191][T11520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.836199][T11530] openvswitch: netlink: Multiple metadata blocks provided [ 201.330526][T11565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2698'. [ 201.330641][T11565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2698'. [ 201.755701][T11589] netlink: 'syz.3.2710': attribute type 7 has an invalid length. [ 201.755727][T11589] netlink: 'syz.3.2710': attribute type 5 has an invalid length. [ 201.755741][T11589] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2710'. [ 202.229647][T11621] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 202.329931][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2730'. [ 202.329960][T11626] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2730'. [ 203.138047][T11676] netlink: 'syz.2.2753': attribute type 9 has an invalid length. [ 203.375480][T11692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.841242][T11718] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 204.313448][T11746] netlink: 'syz.0.2787': attribute type 4 has an invalid length. [ 204.338841][T11746] .`: renamed from bond0 (while UP) [ 204.428936][T11756] netlink: 'syz.1.2793': attribute type 1 has an invalid length. [ 204.428960][T11756] netlink: 'syz.1.2793': attribute type 268 has an invalid length. [ 205.019785][T11790] __nla_validate_parse: 6 callbacks suppressed [ 205.019809][T11790] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2809'. [ 205.019833][T11790] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 205.056362][T11797] netlink: 'syz.2.2812': attribute type 10 has an invalid length. [ 205.056388][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2812'. [ 205.056963][T11791] bond1: option lp_interval: invalid value (0) [ 205.056985][T11791] bond1: option lp_interval: allowed values 1 - 2147483647 [ 205.094425][T11791] bond1 (unregistering): Released all slaves [ 205.128606][T11796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2811'. [ 205.128633][T11796] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2811'. [ 205.128652][T11796] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2811'. [ 205.212542][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'. [ 205.864096][T11836] netlink: 'syz.3.2833': attribute type 15 has an invalid length. [ 205.864126][T11836] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2833'. [ 205.971284][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2837'. [ 206.066854][T11844] netlink: 'syz.4.2834': attribute type 1 has an invalid length. [ 206.066880][T11844] netlink: 'syz.4.2834': attribute type 1 has an invalid length. [ 206.220182][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'. [ 206.860058][T11868] xt_hashlimit: size too large, truncated to 1048576 [ 207.268937][T11880] netlink: 'syz.2.2853': attribute type 15 has an invalid length. [ 207.483533][T11882] netlink: 'syz.0.2854': attribute type 20 has an invalid length. [ 207.483562][T11882] IPv6: NLM_F_CREATE should be specified when creating new route [ 208.566364][T11892] geneve3: entered promiscuous mode [ 210.803177][T11951] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 211.076309][T11947] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 211.160419][T11947] bond2 (unregistering): Released all slaves [ 213.118789][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'. [ 213.119103][T12003] netlink: Conntrack attr type has unexpected length (type=4, length=0, expected=32) [ 214.080404][T12020] openvswitch: netlink: IPv4 tun info is not correct [ 214.589546][T12024] netlink: 'syz.0.2911': attribute type 21 has an invalid length. [ 214.589578][T12024] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.419194][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2916'. [ 215.833258][T12034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.145685][T12049] netlink: 'syz.1.2923': attribute type 1 has an invalid length. [ 216.145712][T12049] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2923'. [ 216.630326][T12063] x_tables: ip_tables: osf match: only valid for protocol 6 [ 219.906790][T12122] x_tables: unsorted underflow at hook 4 [ 221.575243][T12160] netlink: 'syz.4.2975': attribute type 1 has an invalid length. [ 221.967914][T12172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2980'. [ 222.443187][T12183] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.812407][T12194] sctp: [Deprecated]: syz.3.2992 (pid 12194) Use of int in maxseg socket option. [ 222.812407][T12194] Use struct sctp_assoc_value instead [ 223.738360][T12219] hsr0: entered allmulticast mode [ 223.738387][T12219] hsr_slave_0: entered allmulticast mode [ 223.756335][T12219] hsr_slave_1: entered allmulticast mode [ 224.112494][T12225] openvswitch: netlink: Actions may not be safe on all matching packets [ 225.593408][T12251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 225.619915][T12244] veth3: entered allmulticast mode [ 226.959209][T12266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.103352][T12269] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 227.154823][T12271] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 227.154855][T12271] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 227.829138][T12286] bridge2: entered promiscuous mode [ 227.902271][T12286] bridge2: entered allmulticast mode [ 228.385749][T12301] Cannot find add_set index 4 as target [ 229.046334][T12318] netlink: 'syz.2.3051': attribute type 12 has an invalid length. [ 229.343394][T12325] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3055'. [ 229.471057][T12326] ipt_REJECT: TCP_RESET invalid for non-tcp [ 230.833513][T12342] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.099078][T12346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3065'. [ 232.744642][T12391] netlink: 'syz.4.3089': attribute type 34 has an invalid length. [ 232.744668][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3089'. [ 232.812981][T12395] netlink: 'syz.2.3087': attribute type 10 has an invalid length. [ 233.097175][T12395] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.111478][T12395] bond0: (slave team0): Enslaving as an active interface with an up link [ 233.114700][T12401] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 233.920732][T12417] smbdirect: ib_dev[syz1] removed [ 234.045913][T12425] xt_socket: unknown flags 0x4 [ 234.243060][T12429] xt_connbytes: Forcing CT accounting to be enabled [ 234.243466][T12429] set match dimension is over the limit! [ 235.702129][T12455] Unsupported ieee802154 address type: 0 [ 235.929454][T12457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3119'. [ 236.407844][T12466] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 236.928818][T12473] netlink: 'syz.1.3125': attribute type 8 has an invalid length. [ 238.654247][T12510] netlink: 'syz.3.3144': attribute type 11 has an invalid length. [ 241.568944][T12563] xt_LOG: prefix is not null-terminated [ 241.711521][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3172'. [ 242.344270][T12584] No such timeout policy "s" [ 242.344292][T12584] netlink: Failed to associated timeout policy 's' [ 242.704107][T12593] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 243.835114][T12616] xt_cgroup: no path or classid specified [ 244.595511][T12630] netlink: 872 bytes leftover after parsing attributes in process `syz.2.3202'. [ 245.662942][T12650] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 245.904952][T12657] netlink: 'syz.1.3216': attribute type 7 has an invalid length. [ 245.904980][T12657] netlink: 'syz.1.3216': attribute type 8 has an invalid length. [ 246.949364][T12671] netlink: 'syz.4.3223': attribute type 4 has an invalid length. [ 246.949391][T12671] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3223'. [ 247.089289][T12674] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3221'. [ 247.205777][T12671] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 250.641275][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'. [ 250.861796][T12755] netlink: 'syz.0.3262': attribute type 1 has an invalid length. [ 250.861824][T12755] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3262'. [ 251.662962][T12766] netlink: 1204 bytes leftover after parsing attributes in process `syz.3.3267'. [ 252.098843][T12773] netlink: 'syz.2.3270': attribute type 3 has an invalid length. [ 252.896973][T12786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.038909][T12795] netlink: 516 bytes leftover after parsing attributes in process `syz.4.3280'. [ 254.704719][T12829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3298'. [ 254.906989][T12836] ip6t_hbh: unknown flags 38 [ 255.846667][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.846936][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.252692][T12907] netlink: 'syz.4.3337': attribute type 1 has an invalid length. [ 261.172162][T12970] syz.3.3368: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 261.173669][T12970] CPU: 1 UID: 0 PID: 12970 Comm: syz.3.3368 Not tainted syzkaller #0 PREEMPT(full) [ 261.173697][T12970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 261.173720][T12970] Call Trace: [ 261.173733][T12970] [ 261.173744][T12970] dump_stack_lvl+0xe8/0x150 [ 261.173795][T12970] warn_alloc+0x24d/0x270 [ 261.173822][T12970] ? kasan_save_track+0x4f/0x80 [ 261.173847][T12970] ? kasan_save_track+0x3e/0x80 [ 261.173876][T12970] ? __pfx_warn_alloc+0x10/0x10 [ 261.173897][T12970] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 261.173932][T12970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.173977][T12970] __vmalloc_node_range_noprof+0x127/0x1540 [ 261.174039][T12970] ? rcu_is_watching+0x16/0xb0 [ 261.174075][T12970] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.174112][T12970] ? __kmalloc_cache_noprof+0x321/0x600 [ 261.174137][T12970] ? __kmalloc_cache_noprof+0x14d/0x600 [ 261.174159][T12970] ? xskq_create+0x56/0x220 [ 261.174192][T12970] xskq_create+0x148/0x220 [ 261.174221][T12970] ? xsk_init_queue+0x8a/0xe0 [ 261.174249][T12970] xsk_init_queue+0x8a/0xe0 [ 261.174279][T12970] xsk_setsockopt+0x52a/0x960 [ 261.174317][T12970] ? __pfx_xsk_setsockopt+0x10/0x10 [ 261.174345][T12970] ? __pfx_aa_sk_perm+0x10/0x10 [ 261.174384][T12970] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 261.174414][T12970] ? __pfx_xsk_setsockopt+0x10/0x10 [ 261.174442][T12970] do_sock_setsockopt+0x17c/0x1b0 [ 261.174479][T12970] __x64_sys_setsockopt+0x13d/0x1b0 [ 261.174520][T12970] do_syscall_64+0x166/0x520 [ 261.174551][T12970] ? trace_irq_disable+0x3b/0x140 [ 261.174576][T12970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.174601][T12970] ? clear_bhb_loop+0x70/0xc0 [ 261.174630][T12970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.174653][T12970] RIP: 0033:0x7f1ff7b9e199 [ 261.174682][T12970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.174702][T12970] RSP: 002b:00007f1ff8980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 261.174726][T12970] RAX: ffffffffffffffda RBX: 00007f1ff7e25fa0 RCX: 00007f1ff7b9e199 [ 261.174743][T12970] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 261.174757][T12970] RBP: 00007f1ff7c350b8 R08: 0000000000000004 R09: 0000000000000000 [ 261.174773][T12970] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.174787][T12970] R13: 00007f1ff7e26038 R14: 00007f1ff7e25fa0 R15: 00007ffcda4f5058 [ 261.174826][T12970] [ 261.177402][T12970] Mem-Info: [ 261.177416][T12970] active_anon:5508 inactive_anon:0 isolated_anon:0 [ 261.177416][T12970] active_file:0 inactive_file:43327 isolated_file:0 [ 261.177416][T12970] unevictable:0 dirty:179 writeback:0 [ 261.177416][T12970] slab_reclaimable:10666 slab_unreclaimable:99138 [ 261.177416][T12970] mapped:29116 shmem:526 pagetables:3496 [ 261.177416][T12970] sec_pagetables:0 bounce:0 [ 261.177416][T12970] kernel_misc_reclaimable:0 [ 261.177416][T12970] free:1330358 free_pcp:9367 free_cma:0 [ 261.177477][T12970] Node 0 active_anon:22032kB inactive_anon:0kB active_file:0kB inactive_file:173116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116464kB dirty:716kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12148kB pagetables:13828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 261.177737][T12970] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 261.177803][T12970] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.177872][T12970] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 261.177917][T12970] Node 0 DMA32 free:1363980kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22032kB inactive_anon:0kB active_file:0kB inactive_file:173116kB unevictable:0kB writepending:716kB zspages:0kB present:3129332kB managed:2546864kB mlocked:0kB bounce:0kB free_pcp:37468kB local_pcp:20820kB free_cma:0kB [ 261.177988][T12970] lowmem_reserve[]: 0 0 0 0 0 [ 261.178040][T12970] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.178104][T12970] lowmem_reserve[]: 0 0 0 0 0 [ 261.178147][T12970] Node 1 Normal free:3942092kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.178213][T12970] lowmem_reserve[]: 0 0 0 0 0 [ 261.178256][T12970] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.178426][T12970] Node 0 DMA32: 2107*4kB (UME) 2052*8kB (UME) 838*16kB (UME) 511*32kB (UME) 728*64kB (UME) 600*128kB (UM) 403*256kB (UM) 233*512kB (UME) 113*1024kB (UE) 6*2048kB (ME) 204*4096kB (UM) = 1364044kB [ 261.178621][T12970] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 261.178738][T12970] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 6*16kB (UM) 12*32kB (UM) 3*64kB (UM) 6*128kB (UM) 3*256kB (UM) 5*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (M) = 3942092kB [ 261.178927][T12970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.178947][T12970] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.178970][T12970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.178989][T12970] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.179008][T12970] 43849 total pagecache pages [ 261.179021][T12970] 0 pages in swap cache [ 261.179031][T12970] Free swap = 124996kB [ 261.179039][T12970] Total swap = 124996kB [ 261.179049][T12970] 2097051 pages RAM [ 261.179057][T12970] 0 pages HighMem/MovableOnly [ 261.179065][T12970] 428719 pages reserved [ 261.179074][T12970] 0 pages cma reserved [ 264.769653][T13032] xt_REDIRECT: bad rangesize 26624. [ 265.828598][T13058] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 266.545254][T13080] xt_REDIRECT: bad MAP_IPS. [ 266.903347][T13092] xt_cluster: node mask cannot exceed total number of nodes [ 267.194238][T13099] netlink: 'syz.3.3431': attribute type 97 has an invalid length. [ 267.194264][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'. [ 267.194282][T13099] netlink: 'syz.3.3431': attribute type 97 has an invalid length. [ 267.194305][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3431'. [ 267.236603][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3432'. [ 267.328029][T13100] bond1: option xmit_hash_policy: invalid value (64) [ 267.397873][T13100] bond1 (unregistering): Released all slaves [ 271.049474][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 271.592406][T13172] xt_TCPMSS: Only works on TCP SYN packets [ 272.261363][T13190] netlink: zone id is out of range [ 272.261403][T13190] netlink: del zone limit has 4 unknown bytes [ 273.263094][T13213] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3486'. [ 273.720054][T13218] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 275.285107][T13241] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 275.490289][T13252] xt_l2tp: invalid flags combination: 0 [ 276.011997][T13256] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 276.931253][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3517'. [ 277.080407][T13278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3519'. [ 279.081686][T13327] netlink: 'syz.4.3541': attribute type 23 has an invalid length. [ 280.724461][T13354] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3552'. [ 282.333283][T13378] netlink: 'syz.3.3567': attribute type 11 has an invalid length. [ 282.429358][T13383] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3570'. [ 282.465731][T13385] netlink: 'syz.1.3568': attribute type 2 has an invalid length. [ 286.399436][T13482] xt_hl: Unknown Hop Limit match mode: 206 [ 286.774754][T13486] netlink: 'syz.1.3619': attribute type 1 has an invalid length. [ 286.802845][T13488] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3618'. [ 287.805031][T13505] openvswitch: netlink: nsh attr 350 is out of range max 3 [ 288.448054][T13519] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3634'. [ 288.758879][T13524] bond2: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 288.849676][T13524] bond2 (unregistering): Released all slaves [ 290.226198][T13536] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3641'. [ 290.226228][T13536] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3641'. [ 291.546717][T13555] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3653'. [ 292.694594][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'. [ 292.832798][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'. [ 293.213603][T13580] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3662'. [ 293.647690][T13593] netlink: 'syz.1.3668': attribute type 21 has an invalid length. [ 293.647717][T13593] IPv6: NLM_F_CREATE should be specified when creating new route [ 293.648006][T13593] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.648017][T13593] IPv6: NLM_F_CREATE should be set when creating new route [ 293.649179][T13593] IPv6: NLM_F_CREATE should be set when creating new route [ 293.649209][T13593] IPv6: NLM_F_CREATE should be set when creating new route [ 294.417642][T13606] bond2: entered allmulticast mode [ 294.433313][T13606] 8021q: adding VLAN 0 to HW filter on device bond2 [ 294.441835][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3679'. [ 294.441878][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3679'. [ 295.197533][T13629] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 295.776623][T13633] bond3: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 295.901056][T13633] bond3 (unregistering): Released all slaves [ 296.308719][T13643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.443137][T13647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3694'. [ 296.596182][T13649] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 299.490349][T13702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.093506][T13719] netlink: 'syz.3.3728': attribute type 1 has an invalid length. [ 301.873170][T13748] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3742'. [ 302.542105][T13758] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3749'. [ 303.628995][T13769] pim6reg: entered allmulticast mode [ 304.595484][T13795] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3767'. [ 304.595514][T13795] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3767'. [ 304.595530][T13795] netlink: 'syz.2.3767': attribute type 6 has an invalid length. [ 304.595545][T13795] netlink: 'syz.2.3767': attribute type 5 has an invalid length. [ 304.595558][T13795] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3767'. [ 304.949406][T13804] netlink: set zone limit has 4 unknown bytes [ 306.214977][T13831] Bluetooth: MGMT ver 1.23 [ 307.410841][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3795'. [ 308.181255][T13872] Bluetooth: MGMT ver 1.23 [ 308.681994][T13884] netlink: 'syz.0.3811': attribute type 5 has an invalid length. [ 308.682041][T13884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3811'. [ 309.978428][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3823'. [ 310.281413][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 310.343348][T13919] vlan2: entered allmulticast mode [ 310.343374][T13919] bond0: entered allmulticast mode [ 310.343390][T13919] bond_slave_0: entered allmulticast mode [ 310.343799][T13919] bond_slave_1: entered allmulticast mode [ 311.485938][T13947] netlink: 'syz.3.3838': attribute type 1 has an invalid length. [ 311.485964][T13947] nbd: error processing sock list [ 312.233854][T13951] ovs-s: entered promiscuous mode [ 312.348402][T13955] openvswitch: ovs-s: Dropping previously announced user features [ 313.638449][T13976] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3850'. [ 313.879255][T13984] netlink: 'syz.2.3854': attribute type 33 has an invalid length. [ 315.306443][T14001] Zero length message leads to an empty skb [ 316.148094][T14027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3873'. [ 316.558133][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3876'. [ 317.294624][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.294881][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.383556][T14089] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 320.535570][T14103] netlink: 'syz.0.3909': attribute type 2 has an invalid length. [ 321.367556][T14129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.380311][T14150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3931'. [ 322.867836][T14158] Bluetooth: hci0: unsupported parameter 5161 [ 322.867864][T14158] Bluetooth: hci0: unsupported parameter 8192 [ 322.867883][T14158] Bluetooth: hci0: unsupported parameter 5161 [ 322.867898][T14158] Bluetooth: hci0: unsupported parameter 8192 [ 323.363552][T14164] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 324.728232][T14186] netlink: 'syz.2.3949': attribute type 18 has an invalid length. [ 324.873467][ T137] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.873514][ T137] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.873549][ T137] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.873584][ T137] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.460140][T14199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3954'. [ 326.048211][T14211] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3961'. [ 326.411294][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3963'. [ 326.791306][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3971'. [ 326.791348][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3971'. [ 327.067762][T14239] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3975'. [ 327.526762][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 327.667786][T14250] Bluetooth: MGMT ver 1.23 [ 327.692511][T14249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3980'. [ 328.330979][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3987'. [ 328.513704][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3987'. [ 328.599619][T14268] ip_tables: iptables: counters copy to user failed while replacing table [ 329.673471][T14286] netlink: 'syz.3.3998': attribute type 1 has an invalid length. [ 331.643197][T14315] ip_tables: iptables: counters copy to user failed while replacing table [ 332.696515][T14342] netlink: 'syz.2.4024': attribute type 32 has an invalid length. [ 332.696540][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4024'. [ 332.898331][T14342] bond1: Setting coupled_control to off (0) [ 333.465124][T14360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.481681][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4030'. [ 333.481709][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4030'. [ 333.707758][T14359] macvtap1: entered allmulticast mode [ 333.707788][T14359] dummy0: entered allmulticast mode [ 333.764744][T14359] dummy0: entered promiscuous mode [ 334.959193][T14372] tipc: Enabling of bearer rejected, media not registered [ 336.048666][T14392] sock: sock_timestamping_bind_phc: sock not bind to device [ 336.391819][T14398] Driver unsupported XDP return value 0 on prog (id 291) dev N/A, expect packet loss! [ 338.516019][T14448] Bluetooth: hci0: unsupported parameter 5134 [ 338.516046][T14448] Bluetooth: hci0: unsupported parameter 8192 [ 338.516060][T14448] Bluetooth: hci0: unsupported parameter 5134 [ 338.516073][T14448] Bluetooth: hci0: unsupported parameter 8192 [ 339.320225][T14455] team0: Device xfrm0 is of different type [ 339.620018][T14464] ip_tables: iptables: counters copy to user failed while replacing table [ 340.698155][T14481] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4087'. [ 343.330281][T14526] netlink: 'syz.2.4109': attribute type 1 has an invalid length. [ 343.825268][T14537] ip_tables: iptables: counters copy to user failed while replacing table [ 345.202307][T14554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 346.693792][T14574] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 347.087649][T14580] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4137'. [ 348.620960][T14609] netlink: 'syz.0.4150': attribute type 1 has an invalid length. [ 348.620988][T14609] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4150'. [ 348.818129][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4151'. [ 348.835888][T14611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.849872][T14611] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4151'. [ 350.495484][T14637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4163'. [ 350.922250][T14647] pimreg3: entered allmulticast mode [ 352.418795][ T1196] IPVS: starting estimator thread 0... [ 352.812177][T14682] IPVS: Scheduler module ip_vs_mh not found [ 352.812733][T14684] IPVS: using max 27 ests per chain, 64800 per kthread [ 357.247596][T14744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4214'. [ 357.704710][T14753] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4218'. [ 357.704741][T14753] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4218'. [ 358.492268][T14765] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4225'. [ 361.907416][T14833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4256'. [ 363.595821][T14863] netlink: 'syz.0.4270': attribute type 7 has an invalid length. [ 363.595846][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4270'. [ 363.595883][T14863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4270'. [ 363.640391][T14867] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4271'. [ 364.446963][T14873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.446985][T14873] IPv6: NLM_F_CREATE should be set when creating new route [ 365.243067][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4278'. [ 366.708524][T14908] netlink: 'syz.2.4291': attribute type 1 has an invalid length. [ 366.854320][T14912] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 367.698075][T14923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 368.677789][T14934] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 371.528818][T14991] Bluetooth: MGMT ver 1.23 [ 372.064058][T14999] netlink: 'syz.4.4334': attribute type 25 has an invalid length. [ 372.608705][T15006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.325525][T15038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 374.704665][T15046] tipc: Started in network mode [ 374.704753][T15046] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 374.706385][T15046] tipc: Enabling of bearer rejected, failed to enable media [ 374.768122][T15049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4358'. [ 374.768146][T15049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4358'. [ 375.575818][T15062] netlink: 'syz.1.4362': attribute type 1 has an invalid length. [ 375.575842][T15062] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4362'. [ 375.575860][T15062] netlink: 'syz.1.4362': attribute type 1 has an invalid length. [ 376.060856][T15066] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 17 bytes [ 377.368521][T15095] raw_sendmsg: syz.0.4380 forgot to set AF_INET. Fix it! [ 378.727666][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.727920][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.030246][T15122] smc: net device team0 applied user defined pnetid SYZ2 [ 380.839955][T15149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4404'. [ 382.383559][ T3377] IPVS: starting estimator thread 0... [ 382.545484][T15176] IPVS: using max 25 ests per chain, 60000 per kthread [ 382.885550][T15180] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4417'. [ 382.886647][T15180] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4417'. [ 383.905232][T15190] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4421'. [ 384.272185][T15194] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 385.510129][T15216] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 385.510183][T15216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.794210][T15221] netlink: 'syz.3.4436': attribute type 1 has an invalid length. [ 385.794234][T15221] netlink: 'syz.3.4436': attribute type 3 has an invalid length. [ 385.794248][T15221] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4436'. [ 385.794279][T15221] NCSI netlink: No device for ifindex 813332851 [ 387.671209][T15258] Bluetooth: hci0: unsupported parameter 5135 [ 387.671235][T15258] Bluetooth: hci0: unsupported parameter 8192 [ 387.671296][T15258] Bluetooth: hci0: unsupported parameter 5135 [ 387.671311][T15258] Bluetooth: hci0: unsupported parameter 8192 [ 389.042718][T15283] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4464'. [ 389.042753][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4464'. [ 389.499721][T15288] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4469'. [ 389.500826][T15288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4469'. [ 389.500844][T15288] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4469'. [ 389.858876][T15295] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4472'. [ 390.911081][T15309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4479'. [ 390.911110][T15309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4479'. [ 391.104143][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4481'. [ 392.388910][T15335] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4491'. [ 392.672730][T15340] netlink: 'syz.3.4494': attribute type 1 has an invalid length. [ 394.414579][ T30] audit: type=1800 audit(1791210193.948:2): pid=15378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4512" name="memory.events" dev="tmpfs" ino=4632 res=0 errno=0 [ 394.451912][ T30] audit: type=1804 audit(1791210193.998:3): pid=15378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4512" name="/newroot/922/memory.events" dev="tmpfs" ino=4632 res=1 errno=0 [ 394.789881][T15384] xt_hashlimit: size too large, truncated to 1048576 [ 396.468883][T15407] __nla_validate_parse: 2 callbacks suppressed [ 396.468940][T15407] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4525'. [ 396.617555][T15415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4528'. [ 397.186430][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4531'. [ 397.186460][T15422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4531'. [ 397.270750][T15421] netlink: 'syz.0.4530': attribute type 2 has an invalid length. [ 397.501342][T15429] netlink: 'syz.2.4533': attribute type 1 has an invalid length. [ 397.501370][T15429] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4533'. [ 397.501387][T15429] netlink: 'syz.2.4533': attribute type 1 has an invalid length. [ 399.996170][T15472] netlink: zone id is out of range [ 400.113430][T15467] Bluetooth: hci0: unsupported parameter 5161 [ 400.113457][T15467] Bluetooth: hci0: unsupported parameter 8192 [ 400.113471][T15467] Bluetooth: hci0: unsupported parameter 5161 [ 400.113485][T15467] Bluetooth: hci0: unsupported parameter 8192 [ 401.867595][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4562'. [ 401.867655][T15488] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 402.711091][T15510] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.329512][T15505] veth5: entered allmulticast mode [ 405.806606][T15555] macvlan0: entered promiscuous mode [ 405.923255][T15559] netlink: 'syz.3.4593': attribute type 1 has an invalid length. [ 408.428306][T15600] ip_tables: iptables: counters copy to user failed while replacing table [ 408.603574][T15605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4617'. [ 408.640396][T15602] xt_hashlimit: size too large, truncated to 1048576 [ 411.140015][T15643] netlink: NAT attribute has 4 unknown bytes [ 411.140055][T15643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.619220][T15649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4635'. [ 411.619521][T15649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4635'. [ 413.808715][T15681] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 415.842187][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4667'. [ 416.145009][T15722] Bluetooth: hci0: unsupported parameter 5134 [ 416.145036][T15722] Bluetooth: hci0: unsupported parameter 8192 [ 416.145050][T15722] Bluetooth: hci0: unsupported parameter 5134 [ 416.145063][T15722] Bluetooth: hci0: unsupported parameter 8192 [ 416.244558][T15724] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.646162][T15733] Bluetooth: hci0: unsupported parameter 5161 [ 416.646187][T15733] Bluetooth: hci0: unsupported parameter 8192 [ 416.646200][T15733] Bluetooth: hci0: unsupported parameter 5161 [ 416.646214][T15733] Bluetooth: hci0: unsupported parameter 8192 [ 416.832595][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4674'. [ 418.143059][T15758] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 418.304056][T15761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4689'. [ 418.304083][T15761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4689'. [ 418.304111][T15761] netlink: 'syz.1.4689': attribute type 12 has an invalid length. [ 418.304126][T15761] netlink: 'syz.1.4689': attribute type 11 has an invalid length. [ 418.616380][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4692'. [ 418.647535][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4692'. [ 418.648316][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4692'. [ 418.651712][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4692'. [ 418.682208][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4692'. [ 419.363442][T15778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4697'. [ 421.511956][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4713'. [ 421.892203][T15826] Bluetooth: hci0: unsupported parameter 5135 [ 421.892228][T15826] Bluetooth: hci0: unsupported parameter 8192 [ 421.892242][T15826] Bluetooth: hci0: unsupported parameter 5135 [ 421.892255][T15826] Bluetooth: hci0: unsupported parameter 8192 [ 423.613562][T15849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4729'. [ 424.300573][T15866] netlink: NAT attribute has 4 unknown bytes [ 424.300612][T15866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.980723][T15893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4749'. [ 427.580034][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4765'. [ 428.609585][T15946] netlink: 'syz.4.4774': attribute type 2 has an invalid length. [ 428.609613][T15946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4774'. [ 430.276851][T15967] sctp: [Deprecated]: syz.0.4784 (pid 15967) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.276851][T15967] Use struct sctp_sack_info instead [ 433.065622][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4807'. [ 434.227978][T16032] netlink: Unknown nat attribute (0) [ 434.228021][T16032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.861238][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4819'. [ 435.141932][T16050] netlink: 'syz.1.4821': attribute type 2 has an invalid length. [ 435.501854][T16059] ip_tables: iptables: counters copy to user failed while replacing table [ 436.902810][T16084] ip_tables: iptables: counters copy to user failed while replacing table [ 438.587067][T16116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4850'. [ 438.621982][T16115] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4849'. [ 440.166619][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.166874][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.573422][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4874'. [ 442.604654][T16188] netlink: 'syz.3.4883': attribute type 2 has an invalid length. [ 444.531736][T16227] netlink: 'syz.2.4900': attribute type 29 has an invalid length. [ 444.531762][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4900'. [ 444.561394][T16227] netlink: 'syz.2.4900': attribute type 29 has an invalid length. [ 444.561420][T16227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4900'. [ 445.986777][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4908'. [ 446.460487][T16257] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4914'. [ 446.815368][T16259] Bluetooth: hci0: unsupported parameter 5135 [ 446.815395][T16259] Bluetooth: hci0: unsupported parameter 8192 [ 446.815409][T16259] Bluetooth: hci0: unsupported parameter 5135 [ 446.815423][T16259] Bluetooth: hci0: unsupported parameter 8192 [ 447.103842][T16267] Bluetooth: hci0: unsupported parameter 5135 [ 447.103867][T16267] Bluetooth: hci0: unsupported parameter 8192 [ 447.103881][T16267] Bluetooth: hci0: unsupported parameter 5135 [ 447.103894][T16267] Bluetooth: hci0: unsupported parameter 8192 [ 448.848865][T16297] netlink: 'syz.3.4933': attribute type 2 has an invalid length. [ 449.653124][T16317] netlink: 'syz.0.4943': attribute type 1 has an invalid length. [ 449.653151][T16317] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4943'. [ 449.653169][T16317] netlink: 'syz.0.4943': attribute type 1 has an invalid length. [ 450.073456][T16325] Bluetooth: hci0: unsupported parameter 5161 [ 450.073485][T16325] Bluetooth: hci0: unsupported parameter 8192 [ 450.073499][T16325] Bluetooth: hci0: unsupported parameter 5161 [ 450.073513][T16325] Bluetooth: hci0: unsupported parameter 8192 [ 450.286986][T16328] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 450.490960][T16329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4948'. [ 453.383511][ T1021] IPVS: starting estimator thread 0... [ 453.473998][T16383] IPVS: using max 23 ests per chain, 55200 per kthread [ 456.201039][T16426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4992'. [ 458.907006][T16469] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5012'. [ 458.910219][T16468] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5011'. [ 460.201902][T16495] tipc: Started in network mode [ 460.201937][T16495] tipc: Node identity ac14140f, cluster identity 4711 [ 460.223558][T16495] tipc: New replicast peer: 255.255.255.255 [ 460.225262][T16495] tipc: Enabled bearer , priority 10 [ 460.230964][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5027'. [ 460.431424][T16499] macvtap1: entered promiscuous mode [ 460.431450][T16499] vlan0: entered promiscuous mode [ 460.465503][T16499] macvtap1: entered allmulticast mode [ 460.465528][T16499] vlan0: entered allmulticast mode [ 460.465543][T16499] veth0_vlan: entered allmulticast mode [ 461.063541][T16509] tipc: Started in network mode [ 461.063578][T16509] tipc: Node identity ac14140f, cluster identity 4711 [ 461.064735][T16509] tipc: New replicast peer: 255.255.255.255 [ 461.065852][T16509] tipc: Enabled bearer , priority 10 [ 461.236303][ T5351] tipc: Node number set to 2886997007 [ 461.478902][T16517] veth0: entered promiscuous mode [ 461.517291][T16514] veth0: left promiscuous mode [ 462.183017][ T5681] tipc: Node number set to 2886997007 [ 462.803643][T16531] netlink: Unknown NAT attribute (type=2049, max=9) [ 462.803687][T16531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.917472][T16533] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5042'. [ 462.936071][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5042'. [ 462.936118][T16533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5042'. [ 463.828904][T16540] netlink: 'syz.0.5045': attribute type 28 has an invalid length. [ 463.828933][T16540] netlink: 'syz.0.5045': attribute type 3 has an invalid length. [ 463.828948][T16540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5045'. [ 464.729447][T16552] openvswitch: netlink: IP tunnel dst address not specified [ 464.729482][T16552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.476195][T16563] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 466.268940][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5064'. [ 467.736552][T16610] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5076'. [ 468.193117][T16616] nbd0: detected capacity change from 0 to 274877906944 [ 468.221708][ T5686] block nbd0: Receive control failed (result -32) [ 468.409210][ T2708] block nbd0: Dead connection, failed to find a fallback [ 468.409250][ T2708] block nbd0: shutting down sockets [ 468.409345][ T2708] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.409437][ T2708] Buffer I/O error on dev nbd0, logical block 0, async page read [ 468.445830][ T2708] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.445935][ T2708] Buffer I/O error on dev nbd0, logical block 0, async page read [ 468.452692][ T2708] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.452797][ T2708] Buffer I/O error on dev nbd0, logical block 0, async page read [ 468.453170][ T2708] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.453250][ T2708] Buffer I/O error on dev nbd0, logical block 0, async page read [ 468.459303][ T2708] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.459384][ T2708] Buffer I/O error on dev nbd0, logical block 0, async page read [ 468.470281][ T2708] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.470347][ T2708] Buffer I/O error on dev nbd0, logical block 0, async page read [ 468.474185][ T2708] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.474263][ T2708] Buffer I/O error on dev nbd0, logical block 0, async page read [ 468.495670][ T2708] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.495757][ T2708] Buffer I/O error on dev nbd0, logical block 0, async page read [ 468.499040][T16617] ldm_validate_partition_table(): Disk read failed. [ 468.499434][ T2708] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.499535][ T2708] Buffer I/O error on dev nbd0, logical block 0, async page read [ 468.526231][ T2708] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 468.526324][ T2708] Buffer I/O error on dev nbd0, logical block 0, async page read [ 468.558666][T16617] Dev nbd0: unable to read RDB block 0 [ 468.566939][T16617] nbd0: unable to read partition table [ 469.114584][T16617] ldm_validate_partition_table(): Disk read failed. [ 469.115094][T16617] Dev nbd0: unable to read RDB block 0 [ 469.117367][T16617] nbd0: unable to read partition table [ 469.927378][T16638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5089'. [ 470.078370][T16641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5089'. [ 470.198502][T16637] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5088'. [ 470.375126][T16644] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5091'. [ 472.063522][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5103'. [ 472.063554][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5103'. [ 473.548210][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5113'. [ 473.548237][T16689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5113'. [ 474.215676][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5118'. [ 474.787141][T16703] sch_tbf: burst 0 is lower than device lo mtu (21) ! [ 479.538804][T16784] netlink: 'syz.3.5156': attribute type 4 has an invalid length. [ 480.669565][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5165'. [ 481.544373][T16819] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 482.024317][T16827] vxcan0: tx address claim with dest, not broadcast [ 482.454031][T16831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5177'. [ 482.976594][T16852] IPv6: Can't replace route, no match found [ 482.978006][T16852] IPv6: Can't replace route, no match found [ 486.733370][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5209'. [ 488.594849][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5226'. [ 490.849070][T16983] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5246'. [ 493.547468][T17033] netlink: 'syz.3.5269': attribute type 1 has an invalid length. [ 493.547495][T17033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5269'. [ 493.874312][T17039] tun0: tun_chr_ioctl cmd 1074025675 [ 493.874337][T17039] tun0: persist enabled [ 496.933306][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5298'. [ 497.289851][T17091] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 497.538263][ T5681] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 497.547553][T17095] tipc: Enabling of bearer rejected, already enabled [ 497.571321][T17097] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 498.777491][T17110] h: entered promiscuous mode [ 499.520583][T17122] netlink: 'syz.3.5312': attribute type 10 has an invalid length. [ 499.521997][T17122] veth0_vlan: entered allmulticast mode [ 499.673793][T17124] ip_tables: iptables: counters copy to user failed while replacing table [ 499.777290][T17122] team0: Device veth0_vlan failed to register rx_handler [ 501.654789][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.655041][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.015460][T17166] netlink: 'syz.0.5331': attribute type 4 has an invalid length. [ 503.721800][T17195] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 505.365135][T17233] sctp: [Deprecated]: syz.4.5360 (pid 17233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.365135][T17233] Use struct sctp_sack_info instead [ 505.557486][T17224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.079074][T17224] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 507.057986][T17225] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 508.224996][T17252] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 510.223381][T17278] bond0: Caught tx_queue_len zero misconfig [ 511.737303][T17310] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5395'. [ 515.321227][T17370] veth0_to_bridge: entered promiscuous mode [ 515.335342][T17369] veth0_to_bridge: left promiscuous mode [ 515.956041][T17387] openvswitch: netlink: IP tunnel dst address not specified [ 515.956080][T17387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.008942][T17384] batman_adv: batadv0: Adding interface: gretap1 [ 516.008963][T17384] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.008997][T17384] batman_adv: batadv0: Interface activated: gretap1 [ 516.342162][T17392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5434'. [ 516.746049][T17397] ip_tables: iptables: counters copy to user failed while replacing table [ 516.860887][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5436'. [ 516.860929][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5436'. [ 518.834088][ T5686] block nbd1: Receive control failed (result -32) [ 518.835711][ T5686] block nbd1: Receive control failed (result -32) [ 519.053349][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5450'. [ 521.297329][T17463] netlink: 'syz.0.5464': attribute type 30 has an invalid length. [ 522.184682][T17481] veth1_to_bond: Caught tx_queue_len zero misconfig [ 524.123594][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5488'. [ 524.223675][T17513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5485'. [ 525.174297][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5495'. [ 526.748213][T17560] netlink: 'syz.4.5508': attribute type 4 has an invalid length. [ 527.112974][T17570] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5513'. [ 527.635863][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5515'. [ 527.878357][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5516'. [ 527.878466][T17577] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 527.879932][T17580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5518'. [ 528.240808][T17586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5520'. [ 528.321256][T17586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5520'. [ 528.321284][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5520'. [ 528.598653][T17588] bond0: entered promiscuous mode [ 528.598680][T17588] bond_slave_0: entered promiscuous mode [ 528.599828][T17588] bond_slave_1: entered promiscuous mode [ 528.643039][T17588] batadv0: entered promiscuous mode [ 528.662959][T17588] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 528.876230][T17588] bond0: left promiscuous mode [ 528.876258][T17588] bond_slave_0: left promiscuous mode [ 528.877418][T17588] bond_slave_1: left promiscuous mode [ 529.047306][T17588] batadv0: left promiscuous mode [ 530.206668][ T30] audit: type=1804 audit(1791210329.748:4): pid=17602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5529" name="/newroot/1112/cgroup.controllers" dev="tmpfs" ino=5587 res=1 errno=0 [ 530.246384][ T30] audit: type=1800 audit(1791210329.788:5): pid=17602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5529" name="cgroup.controllers" dev="tmpfs" ino=5587 res=0 errno=0 [ 531.299532][T17619] erspan0: entered promiscuous mode [ 532.358113][T17638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5542'. [ 533.146119][T17660] netlink: 'syz.0.5552': attribute type 10 has an invalid length. [ 533.149019][T17660] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.149454][T17660] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.283235][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5552'. [ 533.546451][T17660] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.546591][T17660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.546916][T17660] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.547160][T17660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.598277][T17660] .`: (slave bridge0): Enslaving as an active interface with an up link [ 533.717339][T17661] bridge_slave_1: left allmulticast mode [ 533.718191][T17661] bridge_slave_1: left promiscuous mode [ 533.719379][T17661] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.317298][T17661] bridge_slave_0: left allmulticast mode [ 534.317796][T17661] bridge_slave_0: left promiscuous mode [ 534.384122][T17661] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.686950][T17661] .`: (slave bridge0): Releasing backup interface [ 535.612698][T17695] netlink: 'syz.4.5565': attribute type 3 has an invalid length. [ 537.489396][T17714] wg2: Caught tx_queue_len zero misconfig [ 538.349692][T17731] block nbd1: NBD_DISCONNECT [ 538.349771][T17731] block nbd1: Send disconnect failed -32 [ 538.349793][T17731] block nbd1: Send disconnect failed -32 [ 538.349813][T17731] block nbd1: shutting down sockets [ 538.841433][T17744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5588'. [ 539.211940][T17753] netlink: 'syz.4.5593': attribute type 10 has an invalid length. [ 539.219159][T17753] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.334819][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5593'. [ 539.710922][T17753] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.711083][T17753] bridge0: port 2(bridge_slave_1) entered listening state [ 539.822015][T17753] bridge0: entered allmulticast mode [ 539.897200][T17753] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 539.952964][T17755] bridge_slave_1: left allmulticast mode [ 539.953501][T17755] bridge_slave_1: left promiscuous mode [ 539.957052][T17755] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.174450][T17755] bridge_slave_0: left allmulticast mode [ 540.214088][T17755] bridge_slave_0: left promiscuous mode [ 540.216183][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.765685][T17755] bond0: (slave bridge0): Releasing backup interface [ 540.774386][T17755] bridge0 (unregistering): left allmulticast mode [ 541.021307][T17772] sctp: [Deprecated]: syz.2.5600 (pid 17772) Use of int in max_burst socket option. [ 541.021307][T17772] Use struct sctp_assoc_value instead [ 541.184793][T17765] netlink: 284 bytes leftover after parsing attributes in process `syz.1.5599'. [ 541.592160][T17771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.380645][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5625'. [ 544.386836][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5625'. [ 544.389257][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5625'. [ 545.303915][T17847] netlink: 'syz.2.5634': attribute type 1 has an invalid length. [ 545.303943][T17847] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5634'. [ 545.303978][T17847] netlink: 'syz.2.5634': attribute type 1 has an invalid length. [ 545.303994][T17847] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.5634'. [ 545.502654][T17849] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5633'. [ 545.502746][T17849] ip6gre0: Caught tx_queue_len zero misconfig [ 547.465050][T17880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5649'. [ 549.712452][T17921] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 549.847837][T17921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.029993][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5672'. [ 550.030032][T17928] netlink: 'syz.4.5672': attribute type 30 has an invalid length. [ 550.030050][T17928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5672'. [ 550.550073][T17936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5676'. [ 551.107460][T17940] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5679'. [ 551.688421][T17947] tap0: tun_chr_ioctl cmd 2148553947 [ 552.015477][T17950] netlink: 'syz.4.5682': attribute type 3 has an invalid length. [ 552.361396][T17954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5683'. [ 554.621487][T17988] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5698'. [ 554.796064][T17993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5701'. [ 560.884829][T18095] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 561.085384][T18098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5745'. [ 561.116322][T18098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5745'. [ 563.084866][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.085133][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.247327][T18140] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5759'. [ 565.218929][T18147] netlink: 'syz.2.5763': attribute type 1 has an invalid length. [ 565.218956][T18147] netlink: 'syz.2.5763': attribute type 2 has an invalid length. [ 565.323100][T18147] netlink: 'syz.2.5763': attribute type 1 has an invalid length. [ 565.323126][T18147] netlink: 'syz.2.5763': attribute type 2 has an invalid length. [ 565.546041][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5765'. [ 565.546078][T18153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5765'. [ 565.865565][T18163] syz_tun: entered allmulticast mode [ 566.589441][T18183] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 568.051059][T18198] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 568.051084][T18198] syzkaller1: group set to 0 [ 569.185289][T18219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5788'. [ 569.335418][T18219] erspan0: entered promiscuous mode [ 571.830235][T18266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5805'. [ 571.830376][T18266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.353377][T18266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.651595][T18282] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5808'. [ 573.602588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.860411][T18295] ªªªªª»: renamed from dummy0 (while UP) [ 576.086240][T18324] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 577.171768][T18345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5828'. [ 577.171803][T18345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5828'. [ 577.193084][T18345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5828'. [ 577.193111][T18345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5828'. [ 580.095729][T18390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5844'. [ 580.294864][T18390] hsr_slave_0: left promiscuous mode [ 580.319769][T18390] hsr_slave_1: left promiscuous mode [ 581.313132][T18391] netlink: 'syz.3.5845': attribute type 2 has an invalid length. [ 584.359251][T18438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5858'. [ 584.393131][T18438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5858'. [ 584.940193][T18450] netlink: 'syz.2.5863': attribute type 16 has an invalid length. [ 584.940219][T18450] netlink: 'syz.2.5863': attribute type 17 has an invalid length. [ 586.688162][T18450] 0·: left allmulticast mode [ 586.688190][T18450] hsr_slave_0: left allmulticast mode [ 586.688678][T18450] hsr_slave_1: left allmulticast mode [ 586.865151][T18450] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 587.249523][T18483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.276761][T18483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 587.983962][T18493] veth0: Caught tx_queue_len zero misconfig [ 588.602631][T18507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5882'. [ 588.860599][T18514] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 589.852556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.852761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.852935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.853126][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.195567][T18535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5891'. [ 590.366512][T18536] gretap0: entered promiscuous mode [ 591.228845][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.620620][T18535] bridge_slave_1 (unregistering): left allmulticast mode [ 591.621279][T18535] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.958023][T18564] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5900'. [ 595.602270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.602471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.602661][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.602833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.598426][T18635] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 599.362552][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.364122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.364347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.364554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.364898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.365153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.432654][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5949'. [ 602.315710][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5955'. [ 602.536883][T18719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5958'. [ 602.722695][ C1] net_ratelimit: 1 callbacks suppressed [ 602.722803][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.080761][T18783] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.202540][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.202732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.202904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.203087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.758830][T18783] bridge_slave_0 (unregistering): left allmulticast mode [ 607.759316][T18783] bridge_slave_0 (unregistering): left promiscuous mode [ 607.762026][T18783] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.003702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.404786][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5996'. [ 610.451179][T18823] macvlan0: left promiscuous mode [ 610.611899][T18823] netlink: 'syz.1.5996': attribute type 1 has an invalid length. [ 610.611924][T18823] netlink: 'syz.1.5996': attribute type 2 has an invalid length. [ 611.107010][T18838] sctp: [Deprecated]: syz.1.6002 (pid 18838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.107010][T18838] Use struct sctp_sack_info instead [ 611.595086][T18834] syzkaller1: entered promiscuous mode [ 611.595334][T18834] syzkaller1: entered allmulticast mode [ 612.882344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.882570][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.882790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.883007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.334458][T18880] netlink: 'syz.0.6019': attribute type 1 has an invalid length. [ 614.677535][T18882] ieee802154 phy0 wpan0: encryption failed: -22 [ 615.169953][T18887] syzkaller1: entered promiscuous mode [ 615.170222][T18887] syzkaller1: entered allmulticast mode [ 618.064463][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6041'. [ 618.082511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.082709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.082899][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.083071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.534278][T18931] netlink: 'syz.0.6041': attribute type 1 has an invalid length. [ 618.534305][T18931] netlink: 'syz.0.6041': attribute type 2 has an invalid length. [ 619.405008][T18946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.428604][T18944] sctp: [Deprecated]: syz.0.6046 (pid 18944) Use of int in max_burst socket option. [ 619.428604][T18944] Use struct sctp_assoc_value instead [ 620.100034][T18955] geneve3: entered promiscuous mode [ 620.142624][ T59] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 43546 - 0 [ 620.142683][ T59] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 43546 - 0 [ 620.142721][ T59] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 43546 - 0 [ 620.142778][ T59] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 43546 - 0 [ 621.116860][T18962] xt_hashlimit: size too large, truncated to 1048576 [ 621.489399][T18969] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 621.489917][T18969] gretap2: entered promiscuous mode [ 621.490149][T18969] gretap2: entered allmulticast mode [ 621.555475][T18976] netlink: 'syz.4.6060': attribute type 2 has an invalid length. [ 621.567415][T18976] netlink: 'syz.4.6060': attribute type 2 has an invalid length. [ 621.567476][T18976] netlink: 67 bytes leftover after parsing attributes in process `syz.4.6060'. [ 622.730502][T18997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6070'. [ 623.560582][ T5686] block nbd1: Receive control failed (result -107) [ 623.842504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.842729][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.842923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.843133][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.465403][T19016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6078'. [ 624.489408][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.489665][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.101376][T19022] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6081'. [ 626.104282][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6086'. [ 627.956368][T19055] netlink: 'syz.2.6096': attribute type 1 has an invalid length. [ 628.167995][T19057] ip_tables: iptables: counters copy to user failed while replacing table [ 628.323944][T19057] C: renamed from lo (while UP) [ 628.366864][T19057] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 628.882262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.882491][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.882687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.882866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.097525][T19071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'. [ 629.137312][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'. [ 629.368039][T19076] vcan0: tx address claim with dest, not broadcast [ 629.597971][T19082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6107'. [ 629.598020][T19082] bond0: ARP target 8.4.0.0 is already present [ 629.598042][T19082] bond0: option arp_ip_target: invalid value (1032) [ 629.998805][T19089] batadv_slave_1: entered promiscuous mode [ 630.030310][T19087] batadv_slave_1: left promiscuous mode [ 631.708191][ T5686] block nbd0: Receive control failed (result -107) [ 631.726253][T19115] block nbd0: reconnected socket [ 632.936687][T19128] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6128'. [ 633.764094][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6138'. [ 634.271410][T19161] netlink: 'syz.2.6142': attribute type 11 has an invalid length. [ 634.642371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.642598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.642831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.643031][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.222580][T19222] pim6reg1: entered promiscuous mode [ 639.222792][T19222] pim6reg1: entered allmulticast mode [ 639.341816][T19229] gretap1: entered promiscuous mode [ 639.358851][T19232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6171'. [ 639.358891][T19232] netlink: 'syz.3.6171': attribute type 7 has an invalid length. [ 639.358906][T19232] netlink: 'syz.3.6171': attribute type 8 has an invalid length. [ 639.358931][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6171'. [ 639.371653][T19229] batman_adv: batadv0: Adding interface: gretap1 [ 639.371704][T19229] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 639.371812][T19229] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 640.402289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.402494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.402722][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.402906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.250766][T19257] bridge_slave_0: left allmulticast mode [ 641.251257][T19257] bridge_slave_0: left promiscuous mode [ 641.252480][T19257] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.825540][T19270] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6185'. [ 641.825581][T19270] netlink: 'syz.0.6185': attribute type 7 has an invalid length. [ 641.825597][T19270] netlink: 'syz.0.6185': attribute type 8 has an invalid length. [ 641.825611][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6185'. [ 642.503209][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6187'. [ 644.041205][T19302] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 644.574190][T19310] syzkaller1: entered promiscuous mode [ 644.574396][T19310] syzkaller1: entered allmulticast mode [ 645.914376][T19329] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6207'. [ 646.059643][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803571a800: rx timeout, send abort [ 646.061899][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035719800: rx timeout, send abort [ 646.067047][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803571a800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 646.069870][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035719800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 646.162369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.162585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.162773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.162960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.846289][T19338] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6211'. [ 646.949074][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806821fc00: rx timeout, send abort [ 646.950353][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806821fc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 647.647865][T19342] netlink: 'syz.0.6215': attribute type 5 has an invalid length. [ 650.343562][T19372] block nbd0: Unsupported socket: should be TCP or UNIX. [ 650.489513][T19376] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6226'. [ 650.648775][T19378] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 650.674728][T19383] netlink: 'syz.2.6231': attribute type 18 has an invalid length. [ 650.674752][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6231'. [ 650.780363][T19383] netlink: 'syz.2.6231': attribute type 18 has an invalid length. [ 650.780388][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6231'. [ 652.002883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.004435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.004658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.004879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.219551][T19412] nbd3: detected capacity change from 0 to 63 [ 652.242139][T19412] block nbd3: NBD_DISCONNECT [ 652.253127][T19412] block nbd3: Disconnected due to user request. [ 652.253153][T19412] block nbd3: shutting down sockets [ 652.293147][ C0] blk_print_req_error: 24 callbacks suppressed [ 652.293173][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.293271][ C0] buffer_io_error: 23 callbacks suppressed [ 652.293284][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 652.293313][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.293398][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 652.293421][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.293497][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 652.293518][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.293610][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 652.296841][ T2708] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.296873][ T2708] Buffer I/O error on dev nbd3, logical block 0, async page read [ 652.297614][ T2708] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.297642][ T2708] Buffer I/O error on dev nbd3, logical block 1, async page read [ 652.298338][ T2708] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.298367][ T2708] Buffer I/O error on dev nbd3, logical block 2, async page read [ 652.299056][ T2708] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.299084][ T2708] Buffer I/O error on dev nbd3, logical block 3, async page read [ 652.299202][ T2708] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.299229][ T2708] Buffer I/O error on dev nbd3, logical block 0, async page read [ 652.299836][ T2708] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 652.299863][ T2708] Buffer I/O error on dev nbd3, logical block 1, async page read [ 652.528008][T19352] ldm_validate_partition_table(): Disk read failed. [ 652.544522][T19352] Dev nbd3: unable to read RDB block 0 [ 652.548343][T19352] nbd3: unable to read partition table [ 652.588509][T19352] ldm_validate_partition_table(): Disk read failed. [ 652.600113][T19352] Dev nbd3: unable to read RDB block 0 [ 652.712676][T19352] nbd3: unable to read partition table [ 653.004174][T19352] [ 653.006575][T19352] ====================================================== [ 653.013656][T19352] WARNING: possible circular locking dependency detected [ 653.020807][T19352] syzkaller #0 Not tainted [ 653.025247][T19352] ------------------------------------------------------ [ 653.032356][T19352] udevd/19352 is trying to acquire lock: [ 653.038125][T19352] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610 [ 653.048176][T19352] [ 653.048176][T19352] but task is already holding lock: [ 653.055571][T19352] ffffffff905ff1c0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 653.066281][T19352] [ 653.066281][T19352] which lock already depends on the new lock. [ 653.066281][T19352] [ 653.076703][T19352] [ 653.076703][T19352] the existing dependency chain (in reverse order) is: [ 653.085763][T19352] [ 653.085763][T19352] -> #8 (uevent_sock_mutex){+.+.}-{4:4}: [ 653.093734][T19352] __mutex_lock+0x19d/0x1550 [ 653.098989][T19352] kobject_uevent_net_broadcast+0x27e/0x560 [ 653.105456][T19352] kobject_uevent_env+0x566/0x9e0 [ 653.111086][T19352] device_add+0x544/0xb80 [ 653.116098][T19352] device_create+0x269/0x300 [ 653.121286][T19352] msr_device_create+0x33/0x50 [ 653.126721][T19352] cpuhp_invoke_callback+0x434/0x810 [ 653.132602][T19352] cpuhp_thread_fun+0x362/0x780 [ 653.138030][T19352] smpboot_thread_fn+0x565/0xa70 [ 653.143601][T19352] kthread+0x38b/0x480 [ 653.148244][T19352] ret_from_fork+0x514/0xb70 [ 653.153397][T19352] ret_from_fork_asm+0x1a/0x30 [ 653.158800][T19352] [ 653.158800][T19352] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 653.166420][T19352] cpuhp_thread_fun+0x127/0x780 [ 653.171858][T19352] smpboot_thread_fn+0x565/0xa70 [ 653.177402][T19352] kthread+0x38b/0x480 [ 653.182032][T19352] ret_from_fork+0x514/0xb70 [ 653.187192][T19352] ret_from_fork_asm+0x1a/0x30 [ 653.192529][T19352] [ 653.192529][T19352] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 653.200334][T19352] cpus_read_lock+0x42/0x160 [ 653.205514][T19352] static_key_slow_inc+0x12/0x30 [ 653.211120][T19352] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 653.217505][T19352] nbd_genl_foreach_sock+0x265/0x450 [ 653.223368][T19352] nbd_genl_reconfigure+0xbbb/0x1040 [ 653.229217][T19352] genl_family_rcv_msg_doit+0x233/0x340 [ 653.235454][T19352] genl_rcv_msg+0x614/0x7a0 [ 653.240523][T19352] netlink_rcv_skb+0x226/0x4a0 [ 653.245847][T19352] genl_rcv+0x28/0x40 [ 653.250389][T19352] netlink_unicast+0x7bd/0x940 [ 653.255809][T19352] netlink_sendmsg+0x813/0xb40 [ 653.261137][T19352] sock_sendmsg_nosec+0x13a/0x180 [ 653.266817][T19352] ____sys_sendmsg+0x54e/0x850 [ 653.272216][T19352] ___sys_sendmsg+0x2a5/0x360 [ 653.277458][T19352] __x64_sys_sendmsg+0x1b1/0x290 [ 653.282973][T19352] do_syscall_64+0x166/0x520 [ 653.288227][T19352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.294718][T19352] [ 653.294718][T19352] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 653.302421][T19352] __mutex_lock+0x19d/0x1550 [ 653.307589][T19352] nbd_queue_rq+0x373/0xff0 [ 653.312658][T19352] blk_mq_dispatch_rq_list+0x499/0x1990 [ 653.318901][T19352] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 653.325848][T19352] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 653.332398][T19352] blk_mq_run_work_fn+0x16c/0x300 [ 653.337998][T19352] process_scheduled_works+0xc3d/0x1630 [ 653.344118][T19352] worker_thread+0xa47/0xfb0 [ 653.349280][T19352] kthread+0x38b/0x480 [ 653.353918][T19352] ret_from_fork+0x514/0xb70 [ 653.359064][T19352] ret_from_fork_asm+0x1a/0x30 [ 653.364384][T19352] [ 653.364384][T19352] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 653.371645][T19352] __mutex_lock+0x19d/0x1550 [ 653.376814][T19352] nbd_queue_rq+0xc1/0xff0 [ 653.381783][T19352] blk_mq_dispatch_rq_list+0x499/0x1990 [ 653.387886][T19352] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 653.394790][T19352] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 653.401340][T19352] blk_mq_run_work_fn+0x16c/0x300 [ 653.406956][T19352] process_scheduled_works+0xc3d/0x1630 [ 653.413073][T19352] worker_thread+0xa47/0xfb0 [ 653.418230][T19352] kthread+0x38b/0x480 [ 653.422892][T19352] ret_from_fork+0x514/0xb70 [ 653.428034][T19352] ret_from_fork_asm+0x1a/0x30 [ 653.433389][T19352] [ 653.433389][T19352] -> #3 (set->srcu){.+.+}-{0:0}: [ 653.440560][T19352] __synchronize_srcu+0xc9/0x2f0 [ 653.446107][T19352] elevator_switch+0x1e8/0x7b0 [ 653.451510][T19352] elevator_change+0x2fa/0x480 [ 653.456822][T19352] elevator_set_default+0x375/0x440 [ 653.462599][T19352] blk_register_queue+0x3f3/0x4e0 [ 653.468263][T19352] __add_disk+0x6b8/0xdb0 [ 653.473211][T19352] add_disk_fwnode+0x100/0x3a0 [ 653.478548][T19352] nbd_dev_add+0x733/0xb60 [ 653.483531][T19352] nbd_init+0x168/0x1f0 [ 653.488386][T19352] do_one_initcall+0x250/0x870 [ 653.493732][T19352] do_initcall_level+0x10a/0x1a0 [ 653.499604][T19352] do_initcalls+0x59/0xa0 [ 653.504499][T19352] kernel_init_freeable+0x29d/0x3e0 [ 653.510267][T19352] kernel_init+0x22/0x1d0 [ 653.515167][T19352] ret_from_fork+0x514/0xb70 [ 653.520320][T19352] ret_from_fork_asm+0x1a/0x30 [ 653.525660][T19352] [ 653.525660][T19352] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 653.533538][T19352] __mutex_lock+0x19d/0x1550 [ 653.538710][T19352] elevator_change+0x1af/0x480 [ 653.544074][T19352] elevator_set_none+0xb5/0x140 [ 653.549497][T19352] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 653.555879][T19352] nbd_start_device+0x189/0xb30 [ 653.561301][T19352] nbd_genl_connect+0x167d/0x1cd0 [ 653.566892][T19352] genl_family_rcv_msg_doit+0x233/0x340 [ 653.573015][T19352] genl_rcv_msg+0x614/0x7a0 [ 653.578081][T19352] netlink_rcv_skb+0x226/0x4a0 [ 653.583405][T19352] genl_rcv+0x28/0x40 [ 653.587958][T19352] netlink_unicast+0x7bd/0x940 [ 653.593287][T19352] netlink_sendmsg+0x813/0xb40 [ 653.598619][T19352] sock_sendmsg_nosec+0x13a/0x180 [ 653.604203][T19352] ____sys_sendmsg+0x54e/0x850 [ 653.609541][T19352] ___sys_sendmsg+0x2a5/0x360 [ 653.614792][T19352] __x64_sys_sendmsg+0x1b1/0x290 [ 653.620322][T19352] do_syscall_64+0x166/0x520 [ 653.625490][T19352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.631947][T19352] [ 653.631947][T19352] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 653.640688][T19352] blk_alloc_queue+0x544/0x690 [ 653.646033][T19352] __blk_mq_alloc_disk+0x194/0x390 [ 653.651734][T19352] nbd_dev_add+0x494/0xb60 [ 653.656737][T19352] nbd_init+0x168/0x1f0 [ 653.661476][T19352] do_one_initcall+0x250/0x870 [ 653.666820][T19352] do_initcall_level+0x10a/0x1a0 [ 653.672329][T19352] do_initcalls+0x59/0xa0 [ 653.677217][T19352] kernel_init_freeable+0x29d/0x3e0 [ 653.682975][T19352] kernel_init+0x22/0x1d0 [ 653.687868][T19352] ret_from_fork+0x514/0xb70 [ 653.693029][T19352] ret_from_fork_asm+0x1a/0x30 [ 653.698375][T19352] [ 653.698375][T19352] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 653.705626][T19352] __lock_acquire+0x164c/0x2de0 [ 653.711051][T19352] lock_acquire+0x115/0x350 [ 653.716127][T19352] fs_reclaim_acquire+0x71/0x100 [ 653.721636][T19352] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 653.728005][T19352] __alloc_skb+0x1db/0x7a0 [ 653.733068][T19352] alloc_uevent_skb+0x7d/0x230 [ 653.738423][T19352] kobject_uevent_net_broadcast+0x2fa/0x560 [ 653.744884][T19352] kobject_uevent_env+0x566/0x9e0 [ 653.750475][T19352] nbd_config_put+0x2c8/0x7e0 [ 653.755723][T19352] nbd_release+0xfe/0x140 [ 653.760630][T19352] bdev_release+0x571/0x690 [ 653.765779][T19352] blkdev_release+0x15/0x20 [ 653.770848][T19352] __fput+0x418/0xa50 [ 653.775431][T19352] fput_close_sync+0x11f/0x240 [ 653.780783][T19352] __x64_sys_close+0x7e/0x110 [ 653.786036][T19352] do_syscall_64+0x166/0x520 [ 653.791199][T19352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.797684][T19352] [ 653.797684][T19352] other info that might help us debug this: [ 653.797684][T19352] [ 653.807954][T19352] Chain exists of: [ 653.807954][T19352] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 653.807954][T19352] [ 653.820700][T19352] Possible unsafe locking scenario: [ 653.820700][T19352] [ 653.828260][T19352] CPU0 CPU1 [ 653.833704][T19352] ---- ---- [ 653.839113][T19352] lock(uevent_sock_mutex); [ 653.843766][T19352] lock(cpuhp_state-up); [ 653.850655][T19352] lock(uevent_sock_mutex); [ 653.857809][T19352] lock(fs_reclaim); [ 653.861841][T19352] [ 653.861841][T19352] *** DEADLOCK *** [ 653.861841][T19352] [ 653.870091][T19352] locks held by udevd/19352: 3, last CPU#0: [ 653.876140][T19352] #0: ffff8880262c4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 653.885843][T19352] #1: ffff888027395a60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 653.896724][T19352] #2: ffffffff905ff1c0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 653.907773][T19352] [ 653.907773][T19352] stack backtrace: [ 653.913709][T19352] CPU: 0 UID: 0 PID: 19352 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 653.922695][T19352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 653.932817][T19352] Call Trace: [ 653.936218][T19352] [ 653.939193][T19352] dump_stack_lvl+0xe8/0x150 [ 653.943911][T19352] print_circular_bug+0x2e2/0x300 [ 653.948984][T19352] check_noncircular+0x12f/0x150 [ 653.953974][T19352] __lock_acquire+0x164c/0x2de0 [ 653.958875][T19352] ? __lock_acquire+0x1511/0x2de0 [ 653.964037][T19352] lock_acquire+0x115/0x350 [ 653.968585][T19352] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 653.974605][T19352] ? lock_acquire+0x115/0x350 [ 653.979325][T19352] ? __alloc_skb+0x1db/0x7a0 [ 653.983965][T19352] fs_reclaim_acquire+0x71/0x100 [ 653.988946][T19352] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 653.994981][T19352] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 654.000825][T19352] ? __alloc_skb+0x18d/0x7a0 [ 654.005480][T19352] ? __alloc_skb+0x1db/0x7a0 [ 654.010125][T19352] __alloc_skb+0x1db/0x7a0 [ 654.014608][T19352] alloc_uevent_skb+0x7d/0x230 [ 654.019422][T19352] kobject_uevent_net_broadcast+0x2fa/0x560 [ 654.025377][T19352] kobject_uevent_env+0x566/0x9e0 [ 654.030484][T19352] nbd_config_put+0x2c8/0x7e0 [ 654.035209][T19352] ? __pfx_nbd_config_put+0x10/0x10 [ 654.040467][T19352] ? do_raw_spin_unlock+0xf5/0x200 [ 654.045631][T19352] nbd_release+0xfe/0x140 [ 654.049996][T19352] ? __pfx_nbd_release+0x10/0x10 [ 654.054972][T19352] bdev_release+0x571/0x690 [ 654.059562][T19352] ? __pfx_blkdev_release+0x10/0x10 [ 654.064970][T19352] blkdev_release+0x15/0x20 [ 654.069578][T19352] __fput+0x418/0xa50 [ 654.073615][T19352] fput_close_sync+0x11f/0x240 [ 654.078416][T19352] ? __pfx_fput_close_sync+0x10/0x10 [ 654.083753][T19352] __x64_sys_close+0x7e/0x110 [ 654.088486][T19352] do_syscall_64+0x166/0x520 [ 654.093162][T19352] ? trace_irq_disable+0x3b/0x140 [ 654.098289][T19352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.104396][T19352] ? clear_bhb_loop+0x70/0xc0 [ 654.109124][T19352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.115051][T19352] RIP: 0033:0x7f134fbd0407 [ 654.119489][T19352] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 654.139206][T19352] RSP: 002b:00007fffeca9d480 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 654.147729][T19352] RAX: ffffffffffffffda RBX: 00007f134fb44880 RCX: 00007f134fbd0407 [ 654.155725][T19352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 654.163720][T19352] RBP: 00007f134fb446e8 R08: 0000000000000000 R09: 0000000000000000 [ 654.171712][T19352] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 654.179704][T19352] R13: 000055f788634190 R14: 0000000000000008 R15: 000055f78863b830 [ 654.187741][T19352] [ 654.531891][T19419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6243'. [ 655.393525][T19419] hsr_slave_1 (unregistering): left promiscuous mode [ 657.682198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.682347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.682477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.682593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.802302][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.802442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.802576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.802695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog