last executing test programs: 2.497408351s ago: executing program 2 (id=1828): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x9, 0xfff, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x67, 0x0, 0x10, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x64014102}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB='5'], 0x44}, 0x1, 0x0, 0x0, 0x6cb3fe8b19b50fba}, 0x2000c884) 2.451673646s ago: executing program 2 (id=1830): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002bc0), 0x2a0, 0x20004840) 2.093325526s ago: executing program 4 (id=1837): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x871a15abc695fa1d, 0x0, 0x35dfdbfe, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xe106, 0x5, 0x2, 0x9, 0xb3}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe7e}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.051709173s ago: executing program 4 (id=1839): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.915363689s ago: executing program 4 (id=1841): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0x4e26, @multicast1}, 0x10, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000002c0)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a26", 0xda}, {&(0x7f0000000b40)="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", 0x2eb}], 0x3}}, {{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2}}], 0x2, 0x40080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0xfffffffffffffe53, 0x0}}], 0x65, 0x20040012) 1.698900274s ago: executing program 4 (id=1845): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf251500000005002900000000000c000600030000000000000008002c00d8fcffff14002b800500020001000000050002000200000008002a000700000008002c000200000008000300", @ANYRES32=r3, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 1.533361837s ago: executing program 1 (id=1848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@remote, @in=@private=0xa010100, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x4, 0x100, 0x1, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x3c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3505, 0x4, 0x0, 0x0, 0x83, 0x4000800, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.533104773s ago: executing program 2 (id=1849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 1.474248853s ago: executing program 4 (id=1850): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x5}, 0x8) 1.417631679s ago: executing program 2 (id=1852): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) 1.41626677s ago: executing program 1 (id=1853): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.301450732s ago: executing program 1 (id=1854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 1.194328354s ago: executing program 1 (id=1856): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 985.376069ms ago: executing program 1 (id=1858): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 970.346723ms ago: executing program 1 (id=1860): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x200000000000e}, 0x760) 926.400412ms ago: executing program 3 (id=1861): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0xb, 0x6, @local}, 0x14) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x4, r2, 0x1, 0x49}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000080)=ANY=[@ANYRES8=r2], 0x0) 777.385689ms ago: executing program 3 (id=1862): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 613.524756ms ago: executing program 0 (id=1865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) 603.730331ms ago: executing program 0 (id=1866): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 589.253891ms ago: executing program 3 (id=1867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2fdb}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0xfff, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, 0x0, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r10, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r8, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x20024090) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xf0, r6, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000ffff25bd", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000082620000003f14000200fe80"], 0x64}}, 0x24000000) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060086dd0000100007007f0000017f00000111"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', r3, 0x4000, r11}, 0x18) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r14, 0x0, 0xe, 0x0, &(0x7f00000003c0)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 505.298889ms ago: executing program 4 (id=1868): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 505.129329ms ago: executing program 2 (id=1869): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="8211", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000140)="6ec30803003dca5b6fb8b68818436279e4be6183c2d1", 0x16, 0x3b00, 0x0, 0x0) 474.125259ms ago: executing program 3 (id=1870): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 444.449643ms ago: executing program 0 (id=1871): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'c', ' *:* ', 'wm\x00'}, 0x9) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 376.854824ms ago: executing program 2 (id=1872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="00ad", 0x2}], 0x1}}], 0x1, 0x22008805) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 371.204305ms ago: executing program 3 (id=1873): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) 318.376843ms ago: executing program 0 (id=1874): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38) 189.394483ms ago: executing program 0 (id=1875): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000bc0)="a3bf", 0x2}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x4e23, 0x8, @mcast1, 0xa}, 0x1c, &(0x7f0000001000)}}], 0x3, 0x4008040) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000900)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r1, &(0x7f00000002c0)="b9ba48", 0x3) 164.974867ms ago: executing program 0 (id=1876): unshare(0x8040480) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) write(0xffffffffffffffff, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) connect(r0, 0x0, 0x0) 0s ago: executing program 3 (id=1877): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendto$inet(r0, &(0x7f0000000740)="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", 0x1000, 0x4004800, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/169, 0xa9, 0x0, 0x0}, &(0x7f0000000400)=0x40) kernel console output (not intermixed with test programs): 71.829211][ T5611] hsr_slave_1: entered promiscuous mode [ 71.829637][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 71.829655][ T5611] Cannot create hsr debugfs directory [ 71.844399][ T5613] hsr_slave_0: entered promiscuous mode [ 71.845397][ T5613] hsr_slave_1: entered promiscuous mode [ 71.846122][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 71.846140][ T5613] Cannot create hsr debugfs directory [ 72.297036][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.309464][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.312625][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.322213][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.331864][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.336812][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.349462][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.357889][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.405539][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.421246][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.441297][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.444544][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.445707][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.448571][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.465407][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.476076][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.564600][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.572453][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.573391][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.584749][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.597015][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.604360][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.620454][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.622653][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.711569][ T5613] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.714882][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.728832][ T5613] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.739416][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.754781][ T5613] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.758622][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.762176][ T5613] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.772936][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.817633][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.873100][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.877044][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.877917][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.883024][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.900903][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.916822][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.917387][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.919436][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.942995][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.952644][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.980408][ T5625] Bluetooth: hci0: command tx timeout [ 72.997002][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.997127][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.033487][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.044408][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.044525][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.060455][ T5625] Bluetooth: hci3: command tx timeout [ 73.060488][ T5625] Bluetooth: hci1: command tx timeout [ 73.061294][ T5625] Bluetooth: hci2: command tx timeout [ 73.061360][ T5625] Bluetooth: hci4: command tx timeout [ 73.094218][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.094303][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.132062][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.132531][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.142773][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.197598][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.238871][ T255] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.238930][ T255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.255198][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.275943][ T255] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.276003][ T255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.287344][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.306466][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.342520][ T255] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.342581][ T255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.364574][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.426178][ T3347] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.426279][ T3347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.432430][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.432528][ T3347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.476678][ T255] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.476786][ T255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.456065][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.528580][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.674854][ T5614] veth0_vlan: entered promiscuous mode [ 74.679734][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.725707][ T5614] veth1_vlan: entered promiscuous mode [ 74.773668][ T5616] veth0_vlan: entered promiscuous mode [ 74.783961][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.806920][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.853000][ T5616] veth1_vlan: entered promiscuous mode [ 74.890126][ T5611] veth0_vlan: entered promiscuous mode [ 74.896048][ T5614] veth0_macvtap: entered promiscuous mode [ 74.917814][ T5614] veth1_macvtap: entered promiscuous mode [ 74.945092][ T5611] veth1_vlan: entered promiscuous mode [ 74.981463][ T5612] veth0_vlan: entered promiscuous mode [ 74.997174][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.026376][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.027750][ T5612] veth1_vlan: entered promiscuous mode [ 75.047974][ T5616] veth0_macvtap: entered promiscuous mode [ 75.063133][ T5625] Bluetooth: hci0: command tx timeout [ 75.083459][ T5616] veth1_macvtap: entered promiscuous mode [ 75.128045][ T5611] veth0_macvtap: entered promiscuous mode [ 75.140952][ T5625] Bluetooth: hci4: command tx timeout [ 75.140984][ T5625] Bluetooth: hci2: command tx timeout [ 75.141003][ T5625] Bluetooth: hci1: command tx timeout [ 75.141025][ T5625] Bluetooth: hci3: command tx timeout [ 75.174756][ T5611] veth1_macvtap: entered promiscuous mode [ 75.197733][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.227882][ T5612] veth0_macvtap: entered promiscuous mode [ 75.233879][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.258729][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.286042][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.299155][ T5612] veth1_macvtap: entered promiscuous mode [ 75.311584][ T1159] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.350455][ T255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370477][ T3347] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370527][ T3347] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370763][ T3347] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370798][ T3347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370831][ T3347] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370864][ T3347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370897][ T3347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370929][ T3347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370961][ T3347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.370989][ T3347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.395661][ T3347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.395685][ T3347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.424060][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.534593][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.548491][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.548511][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.629595][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.662925][ T5613] veth0_vlan: entered promiscuous mode [ 75.677811][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.677831][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.767568][ T5613] veth1_vlan: entered promiscuous mode [ 75.782654][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.782675][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.784395][ T135] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.802386][ T135] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.803350][ T135] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.803387][ T135] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.920835][ T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.920856][ T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.990820][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.990839][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.035096][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.035116][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.079392][ T5613] veth0_macvtap: entered promiscuous mode [ 76.136431][ T5613] veth1_macvtap: entered promiscuous mode [ 76.195053][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.195072][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.198731][ T5812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 76.258651][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.313107][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.422122][ T135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.422714][ T135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.423878][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.424070][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.739954][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.744589][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.778142][ T5836] netlink: 'syz.2.11': attribute type 16 has an invalid length. [ 76.778166][ T5836] netlink: 'syz.2.11': attribute type 17 has an invalid length. [ 76.929968][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.930173][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.932836][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.932964][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.140267][ T5617] Bluetooth: hci0: command tx timeout [ 77.179456][ T5845] syzkaller1: entered promiscuous mode [ 77.179478][ T5845] syzkaller1: entered allmulticast mode [ 77.220026][ T5617] Bluetooth: hci3: command tx timeout [ 77.220062][ T5617] Bluetooth: hci1: command tx timeout [ 77.220082][ T5617] Bluetooth: hci2: command tx timeout [ 77.220100][ T5617] Bluetooth: hci4: command tx timeout [ 77.424983][ T5848] ip_tables: iptables: counters copy to user failed while replacing table [ 79.028195][ T5857] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 79.049021][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.052824][ T5857] team0: Port device netdevsim1 added [ 79.075025][ T5857] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 79.079662][ T5857] team0: Port device netdevsim1 removed [ 79.088792][ T5857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.096492][ T5857] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 79.372168][ T5864] batman_adv: batadv0: Adding interface: syzkaller0 [ 79.372191][ T5864] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.372221][ T5864] batman_adv: batadv0: Interface activated: syzkaller0 [ 79.473314][ T5825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 79.610699][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.610722][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.683270][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.683291][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.899481][ T5870] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 79.948336][ T5863] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 80.029102][ T5863] batman_adv: batadv0: Removing interface: syzkaller0 [ 80.276018][ T5882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 80.437806][ T5887] netlink: 'syz.4.30': attribute type 1 has an invalid length. [ 80.437829][ T5887] netlink: 92 bytes leftover after parsing attributes in process `syz.4.30'. [ 80.582381][ T5893] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.34'. [ 80.583377][ T5893] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.34'. [ 80.648699][ T5897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 81.001971][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034a29c00: rx timeout, send abort [ 81.402205][ T5913] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.40'. [ 81.402313][ T5913] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16) [ 81.402345][ T5913] openvswitch: netlink: Message has 4 unknown bytes. [ 81.500410][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034a29800: rx timeout, send abort [ 81.502327][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034a29c00: abort rx timeout. Force session deactivation [ 81.702394][ T5919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.42'. [ 81.702472][ T5919] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 82.000459][ C1] vcan0: j1939_tp_rxtimer: 0xffff888034a29800: abort rx timeout. Force session deactivation [ 82.818299][ T5946] syz.2.60 uses obsolete (PF_INET,SOCK_PACKET) [ 82.858733][ T5949] netlink: 'syz.3.50': attribute type 16 has an invalid length. [ 82.858758][ T5949] netlink: 'syz.3.50': attribute type 17 has an invalid length. [ 82.904071][ T5947] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.906343][ T5947] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.174575][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.174695][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.179685][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.179846][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.642645][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 83.784880][ T5973] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 83.817681][ T5973] macvlan2: entered promiscuous mode [ 83.817704][ T5973] macvlan2: entered allmulticast mode [ 83.982173][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036602800: rx timeout, send abort [ 84.133713][ T5968] infiniband syz1: set down [ 84.135294][ T5968] infiniband syz1: added ipvlan0 [ 84.163238][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 84.289499][ T5968] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 84.289538][ T5968] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 84.289576][ T5968] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 84.354079][ T5985] netlink: 'syz.4.62': attribute type 1 has an invalid length. [ 84.482223][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036602800: abort rx timeout. Force session deactivation [ 84.482372][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880328c6400: rx timeout, send abort [ 84.605763][ T5990] netlink: 'syz.4.62': attribute type 1 has an invalid length. [ 84.625532][ T5985] gretap1: entered allmulticast mode [ 84.705897][ T5968] RDS/IB: syz1: added [ 84.714025][ T5968] smc: adding ib device syz1 with port count 1 [ 84.714161][ T5968] smc: ib device syz1 port 1 has no pnetid [ 84.983642][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880328c6400: abort rx timeout. Force session deactivation [ 85.298356][ T6013] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.551999][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 86.749294][ T1236] cfg80211: failed to load regulatory.db [ 88.740551][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.71'. [ 88.886552][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 90.148272][ T6118] TC_ACT_REPEAT abuse ? [ 90.648723][ T6129] syzkaller0: entered promiscuous mode [ 90.648761][ T6129] syzkaller0: entered allmulticast mode [ 91.438621][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 91.529110][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 94.843873][ T6186] netlink: 'syz.3.96': attribute type 4 has an invalid length. [ 94.874608][ T6186] netlink: 'syz.3.96': attribute type 4 has an invalid length. [ 95.554769][ T6173] Set syz1 is full, maxelem 65536 reached [ 95.774502][ T6194] Zero length message leads to an empty skb [ 96.570911][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 96.803129][ T6247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.108'. [ 96.803152][ T6247] netlink: 192 bytes leftover after parsing attributes in process `syz.0.108'. [ 96.803274][ T6247] netlink: 44 bytes leftover after parsing attributes in process `syz.0.108'. [ 96.904199][ T6237] netlink: 48 bytes leftover after parsing attributes in process `syz.3.105'. [ 97.339546][ T6269] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 97.377653][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'. [ 97.441725][ T6269] x_tables: duplicate underflow at hook 1 [ 97.462171][ T6269] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 98.111398][ T6293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.126'. [ 98.111421][ T6293] netlink: 192 bytes leftover after parsing attributes in process `syz.4.126'. [ 98.111470][ T6293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.126'. [ 98.246079][ T6282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.546572][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 99.814324][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ccc000: rx timeout, send abort [ 100.241965][ T6360] netlink: 'syz.4.147': attribute type 4 has an invalid length. [ 100.312890][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059e7b400: rx timeout, send abort [ 100.314375][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059ccc000: abort rx timeout. Force session deactivation [ 100.812946][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059e7b400: abort rx timeout. Force session deactivation [ 102.045238][ T6435] __nla_validate_parse: 16 callbacks suppressed [ 102.045257][ T6435] netlink: 44 bytes leftover after parsing attributes in process `syz.2.168'. [ 102.045271][ T6435] netlink: 192 bytes leftover after parsing attributes in process `syz.2.168'. [ 102.045319][ T6435] netlink: 44 bytes leftover after parsing attributes in process `syz.2.168'. [ 102.047958][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 102.293734][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888032b8fc00: rx timeout, send abort [ 102.575324][ T6449] tipc: Started in network mode [ 102.575358][ T6449] tipc: Node identity 9e29f08944fc, cluster identity 4711 [ 102.575626][ T6449] tipc: Enabled bearer , priority 0 [ 102.648167][ T6449] syzkaller0: entered promiscuous mode [ 102.648193][ T6449] syzkaller0: entered allmulticast mode [ 102.648916][ T6449] tipc: Resetting bearer [ 102.813201][ T1112] tipc: Resetting bearer [ 102.829467][ T6448] tipc: Resetting bearer [ 104.550072][ T6448] tipc: Disabling bearer [ 104.641789][ T5790] tipc: Node number set to 3671453833 [ 104.763197][ T6495] netlink: 44 bytes leftover after parsing attributes in process `syz.4.182'. [ 104.763238][ T6495] netlink: 192 bytes leftover after parsing attributes in process `syz.4.182'. [ 104.763290][ T6495] netlink: 44 bytes leftover after parsing attributes in process `syz.4.182'. [ 105.159098][ T6511] batman_adv: batadv0: Adding interface: syzkaller0 [ 105.159115][ T6511] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.159145][ T6511] batman_adv: batadv0: Interface activated: syzkaller0 [ 105.215647][ T6514] Bluetooth: MGMT ver 1.23 [ 105.215700][ T6514] Bluetooth: hci0: unsupported parameter 5135 [ 105.218536][ T6514] Bluetooth: hci0: unsupported parameter 8192 [ 105.218565][ T6514] Bluetooth: hci0: unsupported parameter 5135 [ 105.218579][ T6514] Bluetooth: hci0: unsupported parameter 8192 [ 105.219468][ T6509] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 105.259117][ T6509] batman_adv: batadv0: Removing interface: syzkaller0 [ 105.523484][ T6520] netlink: 44 bytes leftover after parsing attributes in process `syz.0.191'. [ 105.753047][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.753670][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.088563][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.118213][ T6520] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.279952][ T6524] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 106.288459][ T6540] Driver unsupported XDP return value 0 on prog (id 45) dev N/A, expect packet loss! [ 106.360275][ T6527] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.383860][ T6527] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.389163][ T6527] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 106.415951][ T6527] bond0 (unregistering): Released all slaves [ 106.439529][ T6544] ip_tables: iptables: counters copy to user failed while replacing table [ 106.509432][ T6544] tipc: Started in network mode [ 106.509499][ T6544] tipc: Node identity ac1414aa, cluster identity 4711 [ 106.526387][ T6544] tipc: Enabled bearer , priority 10 [ 106.600436][ T49] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.600499][ T3347] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.600534][ T3347] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.600565][ T3347] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.732641][ T6552] netlink: 44 bytes leftover after parsing attributes in process `syz.3.198'. [ 106.732662][ T6552] netlink: 192 bytes leftover after parsing attributes in process `syz.3.198'. [ 106.878336][ T6555] syzkaller0: entered promiscuous mode [ 106.878351][ T6555] syzkaller0: entered allmulticast mode [ 106.894833][ T6555] tipc: Started in network mode [ 106.894851][ T6555] tipc: Node identity 0ee45cefd8ff, cluster identity 4711 [ 106.895132][ T6555] tipc: Enabled bearer , priority 0 [ 106.897176][ T6554] tipc: Resetting bearer [ 106.948151][ T6554] tipc: Disabling bearer [ 107.649835][ T1236] tipc: Node number set to 2886997162 [ 107.754308][ T6578] __nla_validate_parse: 2 callbacks suppressed [ 107.754329][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 107.890900][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.207'. [ 108.195371][ T6593] netlink: 44 bytes leftover after parsing attributes in process `syz.3.210'. [ 108.195394][ T6593] netlink: 192 bytes leftover after parsing attributes in process `syz.3.210'. [ 108.195443][ T6593] netlink: 44 bytes leftover after parsing attributes in process `syz.3.210'. [ 108.246145][ T6595] syz_tun: entered allmulticast mode [ 108.490857][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 108.860466][ T6617] syzkaller0: entered promiscuous mode [ 108.860489][ T6617] syzkaller0: entered allmulticast mode [ 108.984336][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 109.207210][ T6637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.227'. [ 109.207240][ T6637] netlink: 192 bytes leftover after parsing attributes in process `syz.0.227'. [ 109.207291][ T6637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.227'. [ 109.266452][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031fb3800: rx timeout, send abort [ 109.433284][ T6645] tipc: Cannot configure node identity twice [ 109.434404][ T6645] tipc: Enabled bearer , priority 0 [ 109.507874][ T6647] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 109.766502][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031fb3800: abort rx timeout. Force session deactivation [ 109.766725][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031fb2400: rx timeout, send abort [ 110.184029][ T6660] bridge0: port 3(bond0) entered blocking state [ 110.185075][ T6660] bridge0: port 3(bond0) entered disabled state [ 110.185338][ T6660] bond0: entered allmulticast mode [ 110.185358][ T6660] bond_slave_0: entered allmulticast mode [ 110.185390][ T6660] bond_slave_1: entered allmulticast mode [ 110.185557][ T6660] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 110.243841][ T6660] bond0: entered promiscuous mode [ 110.243864][ T6660] bond_slave_0: entered promiscuous mode [ 110.244037][ T6660] bond_slave_1: entered promiscuous mode [ 110.245838][ T6660] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 110.248889][ T6660] bridge0: port 3(bond0) entered blocking state [ 110.248982][ T6660] bridge0: port 3(bond0) entered forwarding state [ 110.266767][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031fb2400: abort rx timeout. Force session deactivation [ 110.456533][ T6660] hsr_slave_1 (unregistering): left promiscuous mode [ 110.550223][ T5728] tipc: Node number set to 3592117487 [ 111.376797][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803562f800: rx timeout, send abort [ 111.848047][ T6711] syzkaller0: entered promiscuous mode [ 111.848073][ T6711] syzkaller0: entered allmulticast mode [ 111.876847][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803562f800: abort rx timeout. Force session deactivation [ 111.877024][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803562e400: rx timeout, send abort [ 111.925634][ T5625] block nbd0: Receive control failed (result -107) [ 112.381219][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803562e400: abort rx timeout. Force session deactivation [ 113.577202][ T6733] __nla_validate_parse: 5 callbacks suppressed [ 113.577245][ T6733] netlink: 48 bytes leftover after parsing attributes in process `syz.1.251'. [ 113.740825][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 113.992545][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e5cdc00: rx timeout, send abort [ 114.492593][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e5cdc00: abort rx timeout. Force session deactivation [ 114.492720][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e5cd800: rx timeout, send abort [ 114.992775][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804e5cd800: abort rx timeout. Force session deactivation [ 115.067603][ T6719] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 115.320009][ T6768] macvlan2: entered promiscuous mode [ 115.321111][ T6768] bond0: (slave macvlan2): Opening slave failed [ 115.367087][ T6772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 115.404127][ T6775] syzkaller0: entered promiscuous mode [ 115.404149][ T6775] syzkaller0: entered allmulticast mode [ 115.514437][ T6778] netlink: 'syz.2.263': attribute type 39 has an invalid length. [ 115.596991][ T6782] block nbd0: Unsupported socket: should be TCP or UNIX. [ 115.852464][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 116.056970][ T6803] netlink: 20 bytes leftover after parsing attributes in process `syz.0.274'. [ 116.057010][ T6803] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 116.300803][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.276'. [ 116.413440][ T6807] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.421529][ T6809] ipvlan2: entered promiscuous mode [ 116.425056][ T6809] team0: Device ipvlan2 failed to register rx_handler [ 116.497108][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 116.502121][ T6812] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 116.528381][ T6807] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 116.537426][ T6807] bond1 (unregistering): Released all slaves [ 116.704952][ T6823] Bluetooth: hci0: unsupported parameter 5135 [ 116.704976][ T6823] Bluetooth: hci0: unsupported parameter 8192 [ 116.704989][ T6823] Bluetooth: hci0: unsupported parameter 5135 [ 116.705001][ T6823] Bluetooth: hci0: unsupported parameter 8192 [ 116.807738][ T6826] netlink: 64 bytes leftover after parsing attributes in process `syz.1.282'. [ 116.879242][ T6829] syzkaller1: entered promiscuous mode [ 116.879266][ T6829] syzkaller1: entered allmulticast mode [ 117.238427][ T6840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.286'. [ 117.239644][ T6840] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 117.398729][ T6848] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 117.426076][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.443471][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.653708][ T6852] bond1: (slave veth3): Enslaving as an active interface with a down link [ 117.675583][ T6855] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 117.824961][ T6859] syzkaller0: entered promiscuous mode [ 117.824984][ T6859] syzkaller0: entered allmulticast mode [ 118.196547][ T6870] warning: `syz.3.295' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 118.428037][ T6879] netlink: 'syz.3.298': attribute type 39 has an invalid length. [ 118.772386][ T6886] netlink: 'syz.3.301': attribute type 83 has an invalid length. [ 118.970117][ T6893] syzkaller0: entered promiscuous mode [ 118.970139][ T6893] syzkaller0: entered allmulticast mode [ 119.224099][ T6908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.267286][ T6908] Bluetooth: MGMT ver 1.23 [ 119.385079][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.311'. [ 119.861940][ T6919] bond1: entered promiscuous mode [ 119.861966][ T6919] bond1: entered allmulticast mode [ 119.995322][ T6926] netlink: 40 bytes leftover after parsing attributes in process `syz.4.312'. [ 120.106527][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 120.284230][ T6936] xt_LOG: level 125 >= 8 [ 120.284919][ T6936] netlink: 'syz.2.315': attribute type 5 has an invalid length. [ 120.953618][ T6961] netlink: zone id is out of range [ 120.953635][ T6961] netlink: zone id is out of range [ 120.953644][ T6961] netlink: zone id is out of range [ 120.953651][ T6961] netlink: zone id is out of range [ 120.953658][ T6961] netlink: zone id is out of range [ 120.953666][ T6961] netlink: zone id is out of range [ 120.953673][ T6961] netlink: zone id is out of range [ 121.346720][ T6978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.323'. [ 121.480999][ T6985] net_ratelimit: 2 callbacks suppressed [ 121.481020][ T6985] 0: reclassify loop, rule prio 0, protocol 03 [ 121.796322][ T6998] syzkaller0: entered promiscuous mode [ 121.796345][ T6998] syzkaller0: entered allmulticast mode [ 121.896450][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'. [ 121.896482][ T7003] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 122.574754][ T7027] syzkaller0: entered promiscuous mode [ 122.574778][ T7027] syzkaller0: entered allmulticast mode [ 122.655598][ T7034] netlink: 44 bytes leftover after parsing attributes in process `syz.1.337'. [ 122.655621][ T7034] netlink: 192 bytes leftover after parsing attributes in process `syz.1.337'. [ 122.679147][ T7033] netlink: 11 bytes leftover after parsing attributes in process `syz.2.339'. [ 122.852673][ T7042] syzkaller0: entered promiscuous mode [ 122.852697][ T7042] syzkaller0: entered allmulticast mode [ 122.977719][ T7048] nbd: must specify at least one socket [ 122.981994][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 123.633970][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 123.698221][ T7079] netlink: 56 bytes leftover after parsing attributes in process `syz.2.348'. [ 124.654862][ T7114] __nla_validate_parse: 6 callbacks suppressed [ 124.654881][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.356'. [ 124.654906][ T7114] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 125.235059][ T7139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.391782][ T7125] syzkaller0: entered promiscuous mode [ 125.391808][ T7125] syzkaller0: entered allmulticast mode [ 125.726848][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.362'. [ 125.995382][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d42b800: rx timeout, send abort [ 126.495326][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d42a400: rx timeout, send abort [ 126.495428][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d42b800: abort rx timeout. Force session deactivation [ 126.995400][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d42a400: abort rx timeout. Force session deactivation [ 127.844620][ T7180] syzkaller0: create flow: hash 156162532 index 2 [ 127.863903][ T7177] netlink: 20 bytes leftover after parsing attributes in process `syz.2.369'. [ 127.863940][ T7177] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 127.995401][ T3347] syzkaller0: tun_net_xmit 76 [ 127.995571][ T3347] syzkaller0: tun_net_xmit 48 [ 128.018657][ T7174] syzkaller0: delete flow: hash 156162532 index 2 [ 129.627767][ T7183] syzkaller0: entered promiscuous mode [ 129.627783][ T7183] syzkaller0: entered allmulticast mode [ 129.629237][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 129.716958][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 129.899143][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.899494][ T3347] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.902252][ T7219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.920099][ T5713] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.500848][ T7236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'. [ 130.500880][ T7236] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 130.599661][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.384'. [ 130.675034][ T7244] syzkaller0: entered promiscuous mode [ 130.675056][ T7244] syzkaller0: entered allmulticast mode [ 130.763586][ T7249] syzkaller0: entered promiscuous mode [ 130.763609][ T7249] syzkaller0: entered allmulticast mode [ 130.776501][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 130.796477][ T7248] dummy0: entered promiscuous mode [ 130.799034][ T7248] macvlan2: entered promiscuous mode [ 130.814028][ T7248] dummy0: left promiscuous mode [ 130.992127][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 130.995966][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 130.996317][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 130.997009][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 130.997199][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.390'. [ 131.167892][ T7258] syzkaller0: entered promiscuous mode [ 131.167915][ T7258] syzkaller0: entered allmulticast mode [ 131.385390][ T7269] tipc: Started in network mode [ 131.385423][ T7269] tipc: Node identity b60bf3b396be, cluster identity 4711 [ 131.385560][ T7269] tipc: Enabled bearer , priority 0 [ 131.465326][ T7268] tipc: Disabling bearer [ 131.779056][ T7282] syzkaller0: entered promiscuous mode [ 131.779079][ T7282] syzkaller0: entered allmulticast mode [ 131.842064][ T7285] netlink: 20 bytes leftover after parsing attributes in process `syz.0.402'. [ 131.863812][ T7285] geneve2: entered promiscuous mode [ 131.880447][ T255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.880503][ T255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.880534][ T255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.880562][ T255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.956765][ T7287] ip_tables: iptables: counters copy to user failed while replacing table [ 132.049285][ T7293] syzkaller0: entered promiscuous mode [ 132.049307][ T7293] syzkaller0: entered allmulticast mode [ 132.065866][ T255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.065885][ T255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.066427][ T7293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.120852][ T7291] syzkaller0: entered promiscuous mode [ 132.120874][ T7291] syzkaller0: entered allmulticast mode [ 132.547578][ T7312] tipc: Enabling of bearer rejected, failed to enable media [ 132.743602][ T7319] syzkaller0: entered promiscuous mode [ 132.743626][ T7319] syzkaller0: entered allmulticast mode [ 132.832476][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.832533][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.005647][ T7321] syzkaller0: entered promiscuous mode [ 133.005671][ T7321] syzkaller0: entered allmulticast mode [ 133.090983][ T7329] net_ratelimit: 2 callbacks suppressed [ 133.091004][ T7329] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.366833][ T7342] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 133.386610][ T7342] bond0: (slave netdevsim1): Releasing backup interface [ 133.387315][ T7342] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 133.387503][ T7342] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 133.413171][ T7342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.428027][ T7342] team0: Port device netdevsim1 added [ 133.528180][ T7342] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 133.545830][ T7342] team0: Port device netdevsim1 removed [ 133.554815][ T7342] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.558640][ T7342] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 133.560166][ T7342] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 133.562927][ T7342] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 133.565465][ T7347] syzkaller0: entered promiscuous mode [ 133.565483][ T7347] syzkaller0: entered allmulticast mode [ 133.619018][ T7347] TC_ACT_REPEAT abuse ? [ 133.674137][ T7357] netlink: 'syz.3.426': attribute type 4 has an invalid length. [ 133.776857][ T7358] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 133.839875][ T7361] syzkaller0: entered promiscuous mode [ 133.839898][ T7361] syzkaller0: entered allmulticast mode [ 134.905086][ T7374] bridge_slave_1: left allmulticast mode [ 134.905121][ T7374] bridge_slave_1: left promiscuous mode [ 134.905328][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.939373][ T7374] bridge_slave_0: left allmulticast mode [ 134.939399][ T7374] bridge_slave_0: left promiscuous mode [ 134.939617][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.174462][ T7393] syzkaller0: entered promiscuous mode [ 135.174487][ T7393] syzkaller0: entered allmulticast mode [ 135.704405][ T5625] Bluetooth: hci0: command 0x0401 tx timeout [ 136.780676][ T7398] tipc: Started in network mode [ 136.780701][ T7398] tipc: Node identity 5acc5bd5bbab, cluster identity 4711 [ 136.780794][ T7398] tipc: Enabled bearer , priority 0 [ 136.780990][ T7396] syzkaller0: entered promiscuous mode [ 136.781006][ T7396] syzkaller0: entered allmulticast mode [ 136.783545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.784361][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.802392][ T7402] syzkaller0: entered promiscuous mode [ 136.802421][ T7402] syzkaller0: entered allmulticast mode [ 136.839895][ T7417] tipc: Resetting bearer [ 136.892782][ T7397] tipc: Resetting bearer [ 136.919060][ T7397] tipc: Disabling bearer [ 137.144747][ T7432] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 137.413192][ T7443] syzkaller0: entered promiscuous mode [ 137.413214][ T7443] syzkaller0: entered allmulticast mode [ 137.770963][ T7456] __nla_validate_parse: 2 callbacks suppressed [ 137.770981][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 137.845342][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.845367][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.849642][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.849664][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.883165][ T7461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.453'. [ 138.012678][ T7449] syzkaller1: entered promiscuous mode [ 138.012701][ T7449] syzkaller1: entered allmulticast mode [ 138.459824][ T7483] syzkaller0: entered promiscuous mode [ 138.459848][ T7483] syzkaller0: entered allmulticast mode [ 138.490648][ T7483] syzkaller0: tun_net_xmit 1280 [ 138.490764][ T7483] syzkaller0: create flow: hash 2350379 index 0 [ 139.175271][ T7491] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.175313][ T7491] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.175377][ T7491] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.175765][ T7491] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.175801][ T7491] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.175832][ T7491] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.175862][ T7491] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.175893][ T7491] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.175923][ T7491] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 139.175952][ T7491] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 140.638860][ T7478] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 140.662923][ T7482] syzkaller0 (unregistered): delete flow: hash 2350379 index 0 [ 140.984286][ T7522] netlink: 60 bytes leftover after parsing attributes in process `syz.2.466'. [ 140.984321][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 140.984334][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 141.110046][ T7524] syzkaller0: entered promiscuous mode [ 141.110094][ T7524] syzkaller0: entered allmulticast mode [ 141.159495][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 141.201343][ T7532] syzkaller0: entered promiscuous mode [ 141.201364][ T7532] syzkaller0: entered allmulticast mode [ 141.361850][ T7541] syzkaller0: entered promiscuous mode [ 141.361873][ T7541] syzkaller0: entered allmulticast mode [ 141.646318][ T7549] syzkaller0: entered promiscuous mode [ 141.646341][ T7549] syzkaller0: entered allmulticast mode [ 141.683001][ T7549] tipc: Enabled bearer , priority 0 [ 141.719231][ T7549] tipc: Resetting bearer [ 141.742976][ T7547] tipc: Resetting bearer [ 141.812311][ T7547] tipc: Disabling bearer [ 142.458168][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.483'. [ 142.534550][ T7573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.568769][ T7579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.572701][ T7579] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 142.704184][ T7573] bond2 (unregistering): (slave batadv0): Releasing backup interface [ 142.723619][ T7573] bond2 (unregistering): Released all slaves [ 142.941606][ T7591] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 143.058224][ T7591] bond1 (unregistering): Released all slaves [ 143.067975][ T5625] Bluetooth: hci4: link tx timeout [ 143.067989][ T5625] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.277380][ T7603] syzkaller0: entered promiscuous mode [ 143.277405][ T7603] syzkaller0: entered allmulticast mode [ 143.294739][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 143.454639][ T7604] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.476409][ T7608] syzkaller0: entered promiscuous mode [ 143.477470][ T7608] syzkaller0: entered allmulticast mode [ 143.837897][ T7617] syzkaller0: entered promiscuous mode [ 143.837922][ T7617] syzkaller0: entered allmulticast mode [ 144.096499][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 144.162321][ T7632] netlink: 'syz.4.499': attribute type 1 has an invalid length. [ 144.195201][ T7632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.239442][ T7632] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 144.291635][ T7632] bridge1: entered promiscuous mode [ 144.313615][ T7632] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 144.398711][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 144.622463][ T7651] netlink: 'syz.1.505': attribute type 15 has an invalid length. [ 144.870731][ T7656] syzkaller0: entered promiscuous mode [ 144.870753][ T7656] syzkaller0: entered allmulticast mode [ 144.916193][ T7656] tipc: Enabled bearer , priority 0 [ 144.928160][ T7656] tipc: Resetting bearer [ 144.934764][ T7660] syzkaller0: entered promiscuous mode [ 144.934784][ T7660] syzkaller0: entered allmulticast mode [ 144.942876][ T7655] tipc: Resetting bearer [ 144.967643][ T7655] tipc: Disabling bearer [ 144.986081][ T7660] simple: /dev/video#_3 [ 144.986100][ T7660] simple: /dev/video#_6 [ 144.986110][ T7660] simple: /dev/video#_9 [ 144.986119][ T7660] simple: /dev/video#_12 [ 144.986128][ T7660] simple: /dev/video#_15 [ 144.986138][ T7660] simple: /dev/video#_18 [ 144.986147][ T7660] simple: /dev/video#_21 [ 144.986156][ T7660] simple: /dev/video#_24 [ 144.986165][ T7660] simple: /dev/video#_27 [ 144.986175][ T7660] simple: /dev/video#_30 [ 144.986184][ T7660] simple: /dev/video#_33 [ 144.986194][ T7660] simple: /dev/video#_36 [ 144.986203][ T7660] simple: /dev/video#_39 [ 144.986212][ T7660] simple: /dev/video#_42 [ 144.986222][ T7660] simple: /dev/video#_45 [ 144.986231][ T7660] simple: /dev/video#_48 [ 144.986241][ T7660] simple: /dev/video#_51 [ 144.986250][ T7660] simple: /dev/video#_54 [ 144.986260][ T7660] simple: /dev/video#_57 [ 144.986270][ T7660] simple: /dev/video#_60 [ 144.986278][ T7660] simple: /dev/video#_63 [ 144.986287][ T7660] simple: /dev/video#_66 [ 144.986297][ T7660] simple: /dev/video#_69 [ 144.986306][ T7660] simple: /dev/video#_72 [ 144.986315][ T7660] simple: /dev/video#_75 [ 144.986324][ T7660] simple: /dev/video#_78 [ 144.986333][ T7660] simple: /dev/video#_81 [ 144.986343][ T7660] simple: /dev/video#_84 [ 144.986352][ T7660] simple: /dev/video#_87 [ 144.986361][ T7660] simple: /dev/video#_90 [ 144.986370][ T7660] simple: /dev/video#_93 [ 144.986380][ T7660] simple: /dev/video#_96 [ 144.986390][ T7660] net_ratelimit: 3259 callbacks suppressed [ 144.986401][ T7660] TC_ACT_REPEAT abuse ? [ 145.141988][ T4933] Bluetooth: hci4: command 0x0405 tx timeout [ 145.244416][ T7663] tc action pedit 'at' offset 525311 out of bounds [ 145.604224][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 145.616986][ T7674] netlink: 44 bytes leftover after parsing attributes in process `syz.2.514'. [ 145.617008][ T7674] netlink: 192 bytes leftover after parsing attributes in process `syz.2.514'. [ 145.617056][ T7674] netlink: 44 bytes leftover after parsing attributes in process `syz.2.514'. [ 145.897435][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 145.912156][ T7685] veth0: entered promiscuous mode [ 145.912643][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 145.912665][ T7685] veth0: left promiscuous mode [ 145.952095][ T7686] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.987074][ T7690] syzkaller0: entered promiscuous mode [ 145.987089][ T7690] syzkaller0: entered allmulticast mode [ 146.081419][ T3347] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.081471][ T3347] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.081503][ T3347] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.081534][ T3347] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.143842][ T7693] ip_tables: iptables: counters copy to user failed while replacing table [ 146.149385][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584e4800: rx timeout, send abort [ 146.649595][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880584e4800: abort rx timeout. Force session deactivation [ 146.649808][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035662800: rx timeout, send abort [ 146.662071][ T5625] Bluetooth: hci0: command 0x0401 tx timeout [ 146.662152][ T5617] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 147.149851][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035662800: abort rx timeout. Force session deactivation [ 147.375212][ T7726] netlink: 2 bytes leftover after parsing attributes in process `syz.3.528'. [ 147.436592][ T7728] tc_dump_action: action bad kind [ 148.486948][ T7750] syz.4.536 (7750) used greatest stack depth: 16320 bytes left [ 148.614922][ T7761] netlink: 'syz.4.540': attribute type 21 has an invalid length. [ 148.661846][ T7763] __nla_validate_parse: 3 callbacks suppressed [ 148.661867][ T7763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.541'. [ 148.688366][ T7763] ipvlan2: entered allmulticast mode [ 148.688391][ T7763] syz_tun: entered allmulticast mode [ 149.002462][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.543'. [ 149.627739][ T7792] netlink: 72 bytes leftover after parsing attributes in process `syz.2.549'. [ 149.685814][ T7800] netlink: 68 bytes leftover after parsing attributes in process `syz.4.550'. [ 149.925468][ T7812] syzkaller0: entered promiscuous mode [ 149.925491][ T7812] syzkaller0: entered allmulticast mode [ 149.974128][ T7812] tipc: Enabled bearer , priority 0 [ 150.034654][ T7812] tipc: Resetting bearer [ 150.047676][ T7811] tipc: Resetting bearer [ 150.049006][ T7817] netlink: 48 bytes leftover after parsing attributes in process `syz.3.556'. [ 150.080620][ T7811] tipc: Disabling bearer [ 150.151438][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 150.186117][ T7822] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 150.223675][ T7822] netlink: 2 bytes leftover after parsing attributes in process `syz.0.557'. [ 151.684094][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.567'. [ 151.684171][ T7865] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 151.805515][ T7871] netlink: 44 bytes leftover after parsing attributes in process `syz.4.569'. [ 151.805541][ T7871] netlink: 192 bytes leftover after parsing attributes in process `syz.4.569'. [ 152.176484][ T7892] t: renamed from lo [ 152.527154][ T49] tipc: Subscription rejected, illegal request [ 152.654312][ T59] IPVS: starting estimator thread 0... [ 152.749895][ T7923] IPVS: using max 33 ests per chain, 79200 per kthread [ 153.044062][ T7938] syzkaller0: entered promiscuous mode [ 153.044084][ T7938] syzkaller0: entered allmulticast mode [ 153.135763][ T7938] tipc: Enabled bearer , priority 0 [ 153.143298][ T7937] tipc: Resetting bearer [ 153.192068][ T7937] tipc: Disabling bearer [ 153.728731][ T7966] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 153.887398][ T7966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.982043][ T7984] __nla_validate_parse: 9 callbacks suppressed [ 153.982064][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.593'. [ 153.983270][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'. [ 154.000917][ T7980] macvlan2: entered promiscuous mode [ 154.000939][ T7980] macvlan2: entered allmulticast mode [ 154.001278][ T7980] bond2: entered allmulticast mode [ 154.001314][ T7980] bond2: entered promiscuous mode [ 154.001925][ T7980] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.045395][ T7980] team0: Port device macvlan2 added [ 154.086180][ T7988] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 154.181007][ T7966] bond2: (slave ip6gretap1): making interface the new active one [ 154.181033][ T7966] ip6gretap1: entered promiscuous mode [ 154.181207][ T7966] ip6gretap1: entered allmulticast mode [ 154.226423][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.595'. [ 154.226593][ T7990] openvswitch: netlink: Message has 4 unknown bytes. [ 154.285049][ T7966] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 154.499664][ T7983] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.531861][ T7983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.580009][ T5625] Bluetooth: hci1: command tx timeout [ 154.745130][ T37] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 154.772404][ T3347] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 154.772653][ T3347] bond1: (slave veth3): making interface the new active one [ 154.790732][ T3347] bond1: active interface up! [ 154.953566][ T7787] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 154.957031][ T7787] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 154.957149][ T7787] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 155.570028][ T8037] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 155.598213][ T8041] netlink: 72 bytes leftover after parsing attributes in process `syz.0.604'. [ 155.633393][ T8046] netlink: 'syz.1.605': attribute type 46 has an invalid length. [ 155.643777][ T8046] netlink: 'syz.1.605': attribute type 21 has an invalid length. [ 155.643799][ T8046] netlink: 128 bytes leftover after parsing attributes in process `syz.1.605'. [ 155.643889][ T8046] netlink: 'syz.1.605': attribute type 4 has an invalid length. [ 155.643902][ T8046] netlink: 'syz.1.605': attribute type 3 has an invalid length. [ 155.643914][ T8046] netlink: 3 bytes leftover after parsing attributes in process `syz.1.605'. [ 156.028928][ T8064] ip_tables: iptables: counters copy to user failed while replacing table [ 156.937311][ T8089] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 156.986367][ T8092] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 157.067789][ T8089] team0: Port device dummy0 added [ 157.128924][ T8092] team0: Port device dummy0 removed [ 157.305476][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 157.337800][ T7787] IPVS: starting estimator thread 0... [ 157.386672][ T8098] netlink: 32 bytes leftover after parsing attributes in process `syz.4.611'. [ 157.437086][ T8104] IPVS: using max 36 ests per chain, 86400 per kthread [ 157.532832][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 157.585870][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.615'. [ 158.063417][ T8139] tipc: Enabling of bearer rejected, failed to enable media [ 159.116191][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 159.124902][ T8190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.624'. [ 159.124927][ T8190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.624'. [ 159.124942][ T8190] netlink: 31 bytes leftover after parsing attributes in process `syz.0.624'. [ 159.167815][ T8190] vlan2: entered allmulticast mode [ 159.174481][ T8190] bridge0: port 3(vlan2) entered blocking state [ 159.174678][ T8190] bridge0: port 3(vlan2) entered disabled state [ 159.183300][ T8190] vlan2: entered promiscuous mode [ 159.438713][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 159.617701][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 159.656116][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 160.136275][ T8221] sctp: [Deprecated]: syz.0.629 (pid 8221) Use of int in max_burst socket option deprecated. [ 160.136275][ T8221] Use struct sctp_assoc_value instead [ 160.380813][ T8235] tipc: Resetting bearer [ 160.392168][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.392731][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.765228][ T8235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.779303][ T8235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.798005][ T8225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.235540][ T8235] bond2: left allmulticast mode [ 161.235566][ T8235] ip6gretap1: left allmulticast mode [ 161.235585][ T8235] bond2: left promiscuous mode [ 161.235622][ T8235] ip6gretap1: left promiscuous mode [ 161.290879][ T7787] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.290929][ T7787] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.290965][ T7787] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.290999][ T7787] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.504767][ T8272] lo speed is unknown, defaulting to 1000 [ 161.537047][ T8272] lo speed is unknown, defaulting to 1000 [ 161.543885][ T8272] lo speed is unknown, defaulting to 1000 [ 161.563498][ T8276] netlink: 'syz.2.638': attribute type 2 has an invalid length. [ 161.563519][ T8276] netlink: 224 bytes leftover after parsing attributes in process `syz.2.638'. [ 161.577713][ T8277] netlink: 'syz.3.639': attribute type 29 has an invalid length. [ 161.577732][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.639'. [ 161.614257][ T8277] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 161.623434][ T8276] netlink: 'syz.2.638': attribute type 10 has an invalid length. [ 161.674090][ T8276] team0: Port device dummy0 added [ 161.731932][ T8276] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 161.887020][ T8285] netlink: 220 bytes leftover after parsing attributes in process `syz.0.642'. [ 161.903886][ T8272] infiniband syz0: set down [ 161.903941][ T1219] lo speed is unknown, defaulting to 1000 [ 161.903999][ T8272] infiniband syz0: added lo [ 161.961372][ T8272] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 161.961410][ T8272] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 161.961450][ T8272] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 162.024844][ T5625] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 162.183620][ T8272] RDS/IB: syz0: added [ 162.183685][ T8272] smc: adding ib device syz0 with port count 1 [ 162.183705][ T8272] smc: ib device syz0 port 1 has no pnetid [ 162.184485][ T1219] lo speed is unknown, defaulting to 1000 [ 162.186940][ T8272] lo speed is unknown, defaulting to 1000 [ 162.862607][ T8272] lo speed is unknown, defaulting to 1000 [ 162.910890][ T8302] netlink: 'syz.3.644': attribute type 4 has an invalid length. [ 163.478715][ T8295] lo speed is unknown, defaulting to 1000 [ 163.724928][ T8318] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.032741][ T8272] lo speed is unknown, defaulting to 1000 [ 164.272984][ T8332] __nla_validate_parse: 5 callbacks suppressed [ 164.273006][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'. [ 164.491448][ T8272] lo speed is unknown, defaulting to 1000 [ 164.533538][ T8341] netlink: 48 bytes leftover after parsing attributes in process `syz.3.653'. [ 164.687113][ T8272] lo speed is unknown, defaulting to 1000 [ 165.344515][ T8349] netlink: 120 bytes leftover after parsing attributes in process `syz.2.655'. [ 167.024775][ T8325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.295398][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 167.328990][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 167.390225][ T8369] netlink: 'syz.0.658': attribute type 1 has an invalid length. [ 167.422220][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.658'. [ 167.432997][ T8364] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.440569][ T8364] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.945552][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'. [ 167.945589][ T8386] netlink: 'syz.2.661': attribute type 7 has an invalid length. [ 167.945602][ T8386] netlink: 'syz.2.661': attribute type 8 has an invalid length. [ 167.945615][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.661'. [ 168.142525][ T8386] team0: entered promiscuous mode [ 168.142547][ T8386] team_slave_0: entered promiscuous mode [ 168.147881][ T8386] team_slave_1: entered promiscuous mode [ 168.148086][ T8386] dummy0: entered promiscuous mode [ 168.197475][ T8386] team0: left promiscuous mode [ 168.197500][ T8386] team_slave_0: left promiscuous mode [ 168.197791][ T8386] team_slave_1: left promiscuous mode [ 168.198002][ T8386] dummy0: left promiscuous mode [ 168.446193][ T8409] netlink: 'syz.0.664': attribute type 4 has an invalid length. [ 168.446217][ T8409] netlink: 152 bytes leftover after parsing attributes in process `syz.0.664'. [ 168.565328][ T8407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.664'. [ 168.795259][ T8415] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 169.102261][ T8388] lo speed is unknown, defaulting to 1000 [ 169.568809][ T8445] netlink: 'syz.1.669': attribute type 15 has an invalid length. [ 170.076458][ T8454] bridge0: port 4(bond0) entered blocking state [ 170.076547][ T8454] bridge0: port 4(bond0) entered disabled state [ 170.076905][ T8454] bond0: entered allmulticast mode [ 170.076922][ T8454] bond_slave_0: entered allmulticast mode [ 170.076938][ T8454] bond_slave_1: entered allmulticast mode [ 170.183998][ T8454] bond0: left allmulticast mode [ 170.184022][ T8454] bond_slave_0: left allmulticast mode [ 170.184039][ T8454] bond_slave_1: left allmulticast mode [ 170.185144][ T8454] __nla_validate_parse: 2 callbacks suppressed [ 170.185160][ T8454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.671'. [ 170.193073][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.672'. [ 170.193103][ T8462] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 170.289202][ T8464] netlink: 'syz.4.673': attribute type 10 has an invalid length. [ 170.482929][ T8476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.674'. [ 170.482970][ T8476] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 170.700917][ T8454] hsr_slave_1 (unregistering): left promiscuous mode [ 170.816253][ T8464] team0 (unregistering): Port device team_slave_0 removed [ 170.833388][ T8464] team0 (unregistering): Port device team_slave_1 removed [ 170.836270][ T8464] team0 (unregistering): Port device macvlan2 removed [ 171.166135][ T8494] netlink: 'syz.4.678': attribute type 11 has an invalid length. [ 171.836615][ T8517] ip_tables: iptables: counters copy to user failed while replacing table [ 172.027303][ T8504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.040833][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.679'. [ 172.077233][ T8504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.744469][ T8492] lo speed is unknown, defaulting to 1000 [ 172.930945][ T7787] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.940373][ T1112] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.942154][ T1112] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.942191][ T1112] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.232664][ T8560] netlink: 44 bytes leftover after parsing attributes in process `syz.4.684'. [ 173.232687][ T8560] netlink: 192 bytes leftover after parsing attributes in process `syz.4.684'. [ 173.236869][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.3.685'. [ 173.236908][ T8559] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 173.596614][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'. [ 173.628673][ T8549] smbdirect: ib_dev[syz1] renamed to [s] [ 173.677882][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.677903][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.721989][ T8575] openvswitch: netlink: Flow actions attr not present in new flow. [ 173.788057][ T8554] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 173.788095][ T8554] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 173.788134][ T8554] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 174.004029][ T8583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.223095][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.225732][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.248035][ T8583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.248064][ T8583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.299671][ T8583] veth1_vlan: left promiscuous mode [ 174.302319][ T8583] veth0_vlan: left promiscuous mode [ 174.305567][ T8583] veth0_vlan: entered promiscuous mode [ 174.317728][ T8583] veth1_vlan: entered promiscuous mode [ 174.339625][ T8583] veth1_macvtap: left promiscuous mode [ 174.344652][ T8583] veth0_macvtap: left promiscuous mode [ 174.356297][ T8583] veth0_macvtap: entered promiscuous mode [ 174.357083][ T8583] veth1_macvtap: entered promiscuous mode [ 174.375747][ T8583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.376552][ T8583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.377421][ T8583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.378105][ T8583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.394309][ T8583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.409549][ T8583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.426027][ T8583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.428439][ T8583] bond2: entered allmulticast mode [ 174.428454][ T8583] ip6gretap1: entered allmulticast mode [ 174.428486][ T8583] bond2: entered promiscuous mode [ 174.428493][ T8583] ip6gretap1: entered promiscuous mode [ 174.435129][ T8583] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.460202][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.460292][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.460353][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.460387][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.503267][ T5749] lo speed is unknown, defaulting to 1000 [ 174.504817][ T5749] syz0: Port: 1 Link ACTIVE [ 174.527462][ T7787] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.528847][ T7787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.541753][ T7787] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.541854][ T7787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.780375][ T8598] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.806073][ T8598] bond2: (slave macvlan2): making interface the new active one [ 174.824359][ T8598] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 174.851058][ T5749] lo speed is unknown, defaulting to 1000 [ 174.867560][ T5728] bond_slave_0: entered promiscuous mode [ 174.867597][ T5728] bond_slave_1: entered promiscuous mode [ 175.069637][ T30] audit: type=1800 audit(1791016814.423:2): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.696" name=680B20 dev="tmpfs" ino=790 res=0 errno=0 [ 175.156711][ T8612] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:0 [ 175.520417][ T8620] xt_CT: No such helper "snmp" [ 175.947572][ T8638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.703'. [ 175.947602][ T8638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.703'. [ 175.947617][ T8638] netlink: 31 bytes leftover after parsing attributes in process `syz.3.703'. [ 176.613980][ T8658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.710'. [ 176.864263][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 176.925548][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.714'. [ 177.019140][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 177.561582][ T8681] x_tables: duplicate entry at hook 4 [ 177.878545][ T8691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.720'. [ 177.878571][ T8691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.720'. [ 177.878587][ T8691] netlink: 31 bytes leftover after parsing attributes in process `syz.3.720'. [ 177.913334][ T8692] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 177.913334][ T8692] Please contact the netfilter-devel mailing list or update your nftables rules. [ 177.977004][ T8694] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 179.080084][ T8700] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 179.194180][ T8700] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 179.690278][ T8744] netlink: 'syz.2.735': attribute type 5 has an invalid length. [ 179.801271][ T8746] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 179.896327][ T8741] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 180.028444][ T8741] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 180.069074][ T8759] veth1_to_team: entered promiscuous mode [ 180.076770][ T8759] veth0_to_team: entered promiscuous mode [ 180.078004][ T8759] hsr1: entered promiscuous mode [ 180.107089][ T8756] nbd: must specify at least one socket [ 180.280114][ T8756] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 180.728952][ T8781] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 180.743979][ T8756] bond3 (unregistering): Released all slaves [ 180.936666][ T8416] udevd[8416]: setting mode of /dev/rfcomm2 to 020660 failed: No such file or directory [ 180.936833][ T8416] udevd[8416]: setting owner of /dev/rfcomm2 to uid=0, gid=18 failed: No such file or directory [ 181.297439][ T8794] geneve1: entered promiscuous mode [ 181.326339][ T8794] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 181.326377][ T8794] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 181.326418][ T8794] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 181.601365][ T8811] IPVS: sh: FWM 3 0x00000003 - no destination available [ 181.706302][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.706935][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.741680][ T8806] bond_slave_0: left promiscuous mode [ 181.741711][ T8806] bond_slave_1: left promiscuous mode [ 181.992197][ T8819] __nla_validate_parse: 8 callbacks suppressed [ 181.992237][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 182.143596][ T8818] macsec0: entered promiscuous mode [ 182.148276][ T8823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.761'. [ 182.150083][ T135] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.151035][ T135] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.151101][ T135] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.151168][ T135] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.237127][ T8819] veth1_macvtap: left promiscuous mode [ 182.258230][ T8819] macsec0 (unregistering): left promiscuous mode [ 182.318570][ T8821] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 182.348729][ T8823] tc_dump_action: action bad kind [ 182.920355][ T8842] syzkaller0: entered promiscuous mode [ 182.920388][ T8842] syzkaller0: entered allmulticast mode [ 183.844107][ T8416] udevd[8416]: setting mode of /dev/rfcomm2 to 020660 failed: No such file or directory [ 183.844363][ T8416] udevd[8416]: setting owner of /dev/rfcomm2 to uid=0, gid=18 failed: No such file or directory [ 183.958869][ T8873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.296194][ T8883] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.311320][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.778'. [ 184.639481][ T8901] netlink: 404 bytes leftover after parsing attributes in process `syz.0.783'. [ 184.674406][ T8900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.781'. [ 184.674445][ T8900] netlink: 192 bytes leftover after parsing attributes in process `syz.3.781'. [ 184.674539][ T8900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.781'. [ 184.680995][ T255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.681028][ T255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.869277][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.783'. [ 184.976570][ T8905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.485623][ T8931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.789'. [ 185.821522][ T8945] netlink: 44 bytes leftover after parsing attributes in process `syz.1.795'. [ 186.122199][ T8956] ip_tables: iptables: counters copy to user failed while replacing table [ 188.160152][ T9034] __nla_validate_parse: 4 callbacks suppressed [ 188.160173][ T9034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.835'. [ 188.160198][ T9034] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 188.207543][ T9035] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.435258][ T9050] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.699172][ T9061] Bluetooth: MGMT ver 1.23 [ 188.830701][ T9066] netlink: 404 bytes leftover after parsing attributes in process `syz.3.852'. [ 188.851211][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.851247][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.942691][ T9064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.849'. [ 188.942739][ T9064] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 188.998076][ T9074] netlink: 52 bytes leftover after parsing attributes in process `syz.2.853'. [ 189.106096][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'. [ 189.119597][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.852'. [ 189.236953][ T9070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.655898][ T9103] ip_tables: iptables: counters copy to user failed while replacing table [ 189.739968][ T9107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.866'. [ 189.740000][ T9107] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 189.938953][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.0.867'. [ 189.938985][ T9113] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 190.021552][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.2.869'. [ 190.273435][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 190.372846][ T9136] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 190.517600][ T9142] v: renamed from gretap0 (while UP) [ 190.529733][ T9142] v: entered allmulticast mode [ 190.532397][ T9142] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 191.173138][ T9154] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 191.219931][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 191.220013][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 191.220053][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 191.413614][ T9147] bridge0: port 3(bond0) entered disabled state [ 191.415343][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.417966][ T9147] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.565563][ T9147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.580008][ T9147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.860429][ T135] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.860464][ T135] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 191.860489][ T135] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.863027][ T135] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.863057][ T135] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 191.863081][ T135] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.863114][ T135] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.863138][ T135] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 191.863162][ T135] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.863194][ T135] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.863217][ T135] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 191.863239][ T135] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.167057][ T1159] IPVS: starting estimator thread 0... [ 192.250649][ T9179] IPVS: using max 31 ests per chain, 74400 per kthread [ 192.574989][ T9203] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 193.046575][ T9236] ip_tables: iptables: counters copy to user failed while replacing table [ 193.153782][ T9244] ip_tables: iptables: counters copy to user failed while replacing table [ 193.172645][ T9242] __nla_validate_parse: 11 callbacks suppressed [ 193.172664][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.917'. [ 193.427128][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 193.477815][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 193.552981][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.922'. [ 193.757357][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.924'. [ 193.963451][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 194.018988][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.934'. [ 194.261261][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.395323][ T9301] netlink: 'syz.1.940': attribute type 12 has an invalid length. [ 194.402670][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.939'. [ 194.967649][ T9333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 195.014391][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.955'. [ 195.132755][ T9343] xt_hashlimit: size too large, truncated to 1048576 [ 195.679978][ T1159] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.680023][ T1159] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.680057][ T1159] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.680090][ T1159] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.110275][ T5617] block nbd1: Receive control failed (result -32) [ 196.110684][ T4933] block nbd1: Receive control failed (result -32) [ 196.151463][ T9356] lo speed is unknown, defaulting to 1000 [ 196.735195][ T9401] tipc: Resetting bearer [ 196.769445][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.769950][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.894210][ T9401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.905740][ T9401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.054153][ T9401] bond2: left allmulticast mode [ 197.054177][ T9401] ip6gretap1: left allmulticast mode [ 197.054194][ T9401] bond2: left promiscuous mode [ 197.054206][ T9401] ip6gretap1: left promiscuous mode [ 197.089593][ T10] lo speed is unknown, defaulting to 1000 [ 197.089633][ T10] syz0: Port: 1 Link DOWN [ 197.089705][ T10] lo speed is unknown, defaulting to 1000 [ 197.092138][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.092181][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.092215][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.092248][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.180856][ T9454] caif0: tun_chr_ioctl cmd 2147767507 [ 198.198934][ T9452] __nla_validate_parse: 3 callbacks suppressed [ 198.198951][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1000'. [ 198.441620][ T9461] ipvlan2: entered promiscuous mode [ 198.448126][ T9461] team0: Device ipvlan2 failed to register rx_handler [ 198.583817][ T9469] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1006'. [ 198.583835][ T9469] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1006'. [ 198.988895][ T9491] block nbd0: reconnected socket [ 198.988914][ T9491] nbd: socks must be embedded in a SOCK_ITEM attr [ 198.990752][ T4933] Bluetooth: hci4: command 0x0405 tx timeout [ 199.022492][ T5617] block nbd0: Receive control failed (result -32) [ 199.136663][ T9497] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 199.221752][ T9502] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1020'. [ 199.705766][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1031'. [ 199.902084][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1037'. [ 200.016831][ T9544] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 200.177429][ T9551] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1044'. [ 200.177454][ T9551] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1044'. [ 200.199407][ T9555] tipc: New replicast peer: 172.20.20.187 [ 200.204614][ T9555] tipc: Enabled bearer , priority 10 [ 200.518392][ T9571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1052'. [ 200.518427][ T9571] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 200.631571][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 200.846479][ T9582] smbdirect: ib_dev[s`z1] removed [ 201.021993][ T9603] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 201.216809][ T9616] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 201.349040][ T9625] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20004 [ 201.415904][ T9629] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 201.724489][ T9645] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 201.850128][ T9651] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 202.107744][ T9668] xt_hashlimit: size too large, truncated to 1048576 [ 202.200087][ T9672] block nbd0: reconnected socket [ 202.201678][ T5617] block nbd0: Receive control failed (result -107) [ 202.476874][ T9682] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 202.648361][ T9694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.684958][ T4933] block nbd2: Receive control failed (result -32) [ 202.688872][ T5617] block nbd2: Receive control failed (result -32) [ 203.276952][ T9714] __nla_validate_parse: 10 callbacks suppressed [ 203.276967][ T9714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1114'. [ 203.276978][ T9714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1114'. [ 203.276986][ T9714] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1114'. [ 203.317751][ T9717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'. [ 203.317777][ T9717] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 203.337730][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 203.694423][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1123'. [ 203.697014][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1123'. [ 203.872030][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'. [ 203.872062][ T9747] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 204.229375][ T9146] udevd[9146]: setting owner of /dev/rfcomm2 to uid=0, gid=18 failed: No such file or directory [ 204.546512][ T9768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.747961][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1142'. [ 204.748000][ T9786] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 204.995616][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 205.799194][ T9840] net_ratelimit: 1 callbacks suppressed [ 205.799216][ T9840] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 205.896916][ T255] IPVS: starting estimator thread 0... [ 205.979947][ T9844] IPVS: using max 29 ests per chain, 69600 per kthread [ 206.768677][ T9883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 207.287690][ T9901] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 207.827372][ T9942] gretap1: entered promiscuous mode [ 208.028566][ T9953] ip_tables: iptables: counters copy to user failed while replacing table [ 208.113579][ T9955] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 208.175289][ T9958] IPv6: Can't replace route, no match found [ 208.220934][ T9961] netlink: 'syz.1.1200': attribute type 4 has an invalid length. [ 208.291149][ T4933] Bluetooth: hci4: link tx timeout [ 208.291167][ T4933] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.291341][ T5617] Bluetooth: hci4: link tx timeout [ 208.291352][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.291375][ T5617] Bluetooth: hci4: link tx timeout [ 208.291384][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.291410][ T5617] Bluetooth: hci4: link tx timeout [ 208.291420][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.291722][ T5617] Bluetooth: hci4: link tx timeout [ 208.291734][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.291801][ T5617] Bluetooth: hci4: link tx timeout [ 208.291811][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.291831][ T5617] Bluetooth: hci4: link tx timeout [ 208.291840][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.291860][ T5617] Bluetooth: hci4: link tx timeout [ 208.291870][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292063][ T5617] Bluetooth: hci4: link tx timeout [ 208.292073][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292139][ T5617] Bluetooth: hci4: link tx timeout [ 208.292149][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292174][ T5617] Bluetooth: hci4: link tx timeout [ 208.292183][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292237][ T5617] Bluetooth: hci4: link tx timeout [ 208.292247][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292270][ T5617] Bluetooth: hci4: link tx timeout [ 208.292279][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292361][ T5617] Bluetooth: hci4: link tx timeout [ 208.292371][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292420][ T5617] Bluetooth: hci4: link tx timeout [ 208.292430][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292461][ T5617] Bluetooth: hci4: link tx timeout [ 208.292470][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292517][ T5617] Bluetooth: hci4: link tx timeout [ 208.292527][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292574][ T5617] Bluetooth: hci4: link tx timeout [ 208.292584][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292629][ T5617] Bluetooth: hci4: link tx timeout [ 208.292639][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292707][ T5617] Bluetooth: hci4: link tx timeout [ 208.292717][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292739][ T5617] Bluetooth: hci4: link tx timeout [ 208.292748][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292801][ T5617] Bluetooth: hci4: link tx timeout [ 208.292810][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292905][ T5617] Bluetooth: hci4: link tx timeout [ 208.292916][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.292963][ T5617] Bluetooth: hci4: link tx timeout [ 208.292973][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.293035][ T5617] Bluetooth: hci4: link tx timeout [ 208.293045][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.293092][ T5617] Bluetooth: hci4: link tx timeout [ 208.293102][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.293147][ T5617] Bluetooth: hci4: link tx timeout [ 208.293177][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.293210][ T5617] Bluetooth: hci4: link tx timeout [ 208.293220][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.293241][ T5617] Bluetooth: hci4: link tx timeout [ 208.293250][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.294878][ T5617] Bluetooth: hci4: link tx timeout [ 208.294892][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.294916][ T5617] Bluetooth: hci4: link tx timeout [ 208.294925][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.294946][ T5617] Bluetooth: hci4: link tx timeout [ 208.294955][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.295019][ T5617] Bluetooth: hci4: link tx timeout [ 208.295029][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.295078][ T5617] Bluetooth: hci4: link tx timeout [ 208.295088][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.295135][ T5617] Bluetooth: hci4: link tx timeout [ 208.295145][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.295195][ T5617] Bluetooth: hci4: link tx timeout [ 208.295205][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.306519][ T5617] Bluetooth: hci4: link tx timeout [ 208.306537][ T5617] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.546139][ T9976] netlink: 'syz.3.1208': attribute type 10 has an invalid length. [ 208.548904][ T9976] veth0_vlan: left promiscuous mode [ 208.555367][ T9976] team0: Device veth0_vlan failed to register rx_handler [ 208.687985][ T9977] __nla_validate_parse: 9 callbacks suppressed [ 208.688006][ T9977] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1207'. [ 209.264664][T10003] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1218'. [ 209.274069][T10004] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1216'. [ 209.286155][T10006] ip_tables: iptables: counters copy to user failed while replacing table [ 209.455879][ T9146] udevd[9146]: setting mode of /dev/rfcomm2 to 020660 failed: No such file or directory [ 209.456062][ T9146] udevd[9146]: setting owner of /dev/rfcomm2 to uid=0, gid=18 failed: No such file or directory [ 210.001869][T10033] block nbd0: Unsupported socket: should be TCP or UNIX. [ 210.149576][T10041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1235'. [ 210.149599][T10041] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 210.199274][T10044] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 210.340021][ T5617] Bluetooth: hci4: command 0x0405 tx timeout [ 210.534074][T10055] syzkaller1: entered promiscuous mode [ 210.534098][T10055] syzkaller1: entered allmulticast mode [ 210.726839][T10062] netlink: 'syz.4.1244': attribute type 2 has an invalid length. [ 210.814474][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 210.832896][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 211.366115][T10095] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1257'. [ 211.534102][T10104] syzkaller1: entered promiscuous mode [ 211.534125][T10104] syzkaller1: entered allmulticast mode [ 212.113849][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 212.444146][T10145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1278'. [ 212.556077][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1282'. [ 215.432513][T10148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.092074][T10226] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 216.570357][T10233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1309'. [ 216.868926][T10253] syzkaller0: left promiscuous mode [ 216.868950][T10253] syzkaller0: left allmulticast mode [ 217.056676][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1317'. [ 217.056710][T10261] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 217.189310][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'. [ 217.338600][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1321'. [ 217.569412][T10285] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1326'. [ 217.738160][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1328'. [ 217.738193][T10292] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 218.149287][T10308] ip_tables: iptables: counters copy to user failed while replacing table [ 218.381369][T10319] 0: reclassify loop, rule prio 0, protocol 03 [ 218.515600][T10324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1342'. [ 218.515645][T10324] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 218.621035][T10329] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 218.785241][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 219.041972][T10350] vlan2: entered promiscuous mode [ 219.041999][T10350] syz_tun: entered promiscuous mode [ 219.255824][T10365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1353'. [ 219.255853][T10365] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1353'. [ 219.619483][T10379] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 220.518087][T10406] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 220.573419][T10406] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.061718][ T1112] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.061763][ T1112] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.061795][ T1112] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.120975][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.178097][T10422] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 221.897332][T10449] __nla_validate_parse: 155 callbacks suppressed [ 221.897355][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 222.053362][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'. [ 222.059030][T10461] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1381'. [ 222.059063][T10461] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 222.189490][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1382'. [ 223.004177][T10483] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 223.137104][T10488] batman_adv: batadv0: Adding interface: syzkaller0 [ 223.137121][T10488] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.137225][T10488] batman_adv: batadv0: Interface activated: syzkaller0 [ 223.191541][T10485] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 223.231305][T10485] batman_adv: batadv0: Removing interface: syzkaller0 [ 223.253670][T10495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1394'. [ 223.253705][T10495] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 223.793910][T10521] tipc: Enabling of bearer rejected, failed to enable media [ 224.316304][T10548] syzkaller0: entered promiscuous mode [ 224.316327][T10548] syzkaller0: entered allmulticast mode [ 224.443764][T10551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.446027][T10551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.446974][T10551] bond0 (unregistering): Released all slaves [ 225.151549][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1419'. [ 225.520423][T10597] ip_tables: iptables: counters copy to user failed while replacing table [ 225.678303][ T1112] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 225.905375][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'. [ 226.000142][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1428'. [ 226.105290][T10618] netlink: 'syz.1.1430': attribute type 1 has an invalid length. [ 226.142760][T10618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.182758][T10618] bond0: (slave veth3): Enslaving as an active interface with a down link [ 226.211539][T10618] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.214042][T10618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.248716][T10618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.251712][T10618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.256578][T10618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 226.256604][T10618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 226.264260][T10618] veth1_vlan: left promiscuous mode [ 226.266012][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1431'. [ 226.266770][T10618] veth0_vlan: left promiscuous mode [ 226.269054][T10618] veth0_vlan: entered promiscuous mode [ 226.277108][T10618] veth1_vlan: entered promiscuous mode [ 226.303839][T10618] veth1_macvtap: left promiscuous mode [ 226.305074][T10618] veth0_macvtap: left promiscuous mode [ 226.306386][T10618] veth0_macvtap: entered promiscuous mode [ 226.307713][T10618] veth1_macvtap: entered promiscuous mode [ 226.324050][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.326050][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.327560][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.329017][T10618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.338586][T10618] bond1: left promiscuous mode [ 226.338609][T10618] bond1: left allmulticast mode [ 226.340386][T10618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.372855][T10618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.375382][T10618] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.381803][T10618] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.466039][T10624] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 226.468039][T10624] bond0: (slave batadv2): making interface the new active one [ 226.469050][T10624] batadv2: entered promiscuous mode [ 226.469410][T10624] bond0: (slave batadv2): Enslaving as an active interface with an up link [ 226.513232][ T13] bond0: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 226.528618][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.540542][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.541788][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.541827][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.558534][T10601] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.046133][T10658] syzkaller0: entered promiscuous mode [ 229.046157][T10658] syzkaller0: entered allmulticast mode [ 229.102109][T10652] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 229.106327][T10667] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1448'. [ 229.106348][T10667] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1448'. [ 229.543682][T10684] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1452'. [ 230.003543][T10687] syzkaller0: entered promiscuous mode [ 230.003567][T10687] syzkaller0: entered allmulticast mode [ 230.022071][T10689] sock: sock_set_timeout: `syz.0.1456' (pid 10689) tries to set negative timeout [ 230.091178][T10695] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1456'. [ 230.091558][T10695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'. [ 230.135297][T10696] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 230.136403][T10696] netlink: 'syz.1.1457': attribute type 23 has an invalid length. [ 230.136421][T10696] netlink: 'syz.1.1457': attribute type 21 has an invalid length. [ 230.136436][T10696] IPv6: NLM_F_CREATE should be specified when creating new route [ 230.287028][T10693] syzkaller0: entered promiscuous mode [ 230.287053][T10693] syzkaller0: entered allmulticast mode [ 230.365333][T10706] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1461'. [ 230.365355][T10706] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1461'. [ 230.365415][T10706] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1461'. [ 233.070518][ T1112] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.072107][ T59] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.072145][ T59] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.072177][ T59] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.572351][T10752] vlan0: entered promiscuous mode [ 233.572614][T10752] vlan0: entered allmulticast mode [ 233.572629][T10752] veth0_vlan: entered allmulticast mode [ 233.631279][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 233.631371][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 233.841260][T10762] syzkaller0: entered promiscuous mode [ 233.841282][T10762] syzkaller0: entered allmulticast mode [ 233.955964][T10733] lo speed is unknown, defaulting to 1000 [ 234.309743][T10773] __nla_validate_parse: 2 callbacks suppressed [ 234.310248][T10773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1480'. [ 234.436474][T10773] netlink: 'syz.1.1480': attribute type 2 has an invalid length. [ 234.472104][T10773] : entered promiscuous mode [ 234.496640][T10778] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 234.526474][T10776] TC_ACT_REPEAT abuse ? [ 234.870193][T10787] tc_dump_action: action bad kind [ 234.957409][T10789] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1486'. [ 234.957434][T10789] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1486'. [ 234.957491][T10789] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1486'. [ 236.308527][T10830] netlink: 'syz.1.1496': attribute type 1 has an invalid length. [ 236.450421][T10837] bond4: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 236.546153][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1496'. [ 236.604026][T10830] veth5: entered promiscuous mode [ 236.617222][T10830] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 236.618809][T10837] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.641848][ T59] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 236.761704][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 236.806850][T10851] tc action pedit unable to extract header offset for header type (0x5) [ 236.806873][T10851] tc action pedit unable to extract header offset for header type (0x5) [ 236.806885][T10851] tc action pedit unable to extract header offset for header type (0x5) [ 236.806897][T10851] tc action pedit unable to extract header offset for header type (0x5) [ 236.806909][T10851] tc action pedit unable to extract header offset for header type (0x5) [ 236.806920][T10851] tc action pedit unable to extract header offset for header type (0x5) [ 236.806932][T10851] tc action pedit unable to extract header offset for header type (0x5) [ 236.806943][T10851] tc action pedit unable to extract header offset for header type (0x5) [ 236.806955][T10851] tc action pedit unable to extract header offset for header type (0x5) [ 236.806967][T10851] tc action pedit unable to extract header offset for header type (0x5) [ 236.806988][T10851] 0: reclassify loop, rule prio 0, protocol 800 [ 237.179206][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'. [ 237.440705][T10862] syzkaller0: entered promiscuous mode [ 237.440729][T10862] syzkaller0: entered allmulticast mode [ 237.447480][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.486056][T10862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.694803][T10864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1505'. [ 237.714513][T10864] syzkaller1: entered promiscuous mode [ 237.714536][T10864] syzkaller1: entered allmulticast mode [ 237.881065][ T59] batadv2: left promiscuous mode [ 237.974446][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 238.009169][T10868] vlan2: entered promiscuous mode [ 238.009193][T10868] veth0: entered promiscuous mode [ 238.185406][T10880] syzkaller0: entered promiscuous mode [ 238.185427][T10880] syzkaller0: entered allmulticast mode [ 238.368435][T10894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1516'. [ 238.663387][T10908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 238.693902][T10908] team0: Port device team_slave_0 removed [ 239.618268][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'. [ 241.527324][T10945] syzkaller0: entered promiscuous mode [ 241.527348][T10945] syzkaller0: entered allmulticast mode [ 241.609255][T10945] tipc: Enabled bearer , priority 0 [ 241.634670][T10944] tipc: Resetting bearer [ 241.719681][T10944] tipc: Disabling bearer [ 241.755560][ T4933] Bluetooth: hci2: unexpected cc 0x2003 length: 10 > 9 [ 241.755610][ T4933] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 241.808132][T10953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1532'. [ 242.051038][T10963] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.1536'. [ 242.116190][T10963] tipc: Enabled bearer , priority 0 [ 242.127159][T10963] tipc: Resetting bearer [ 242.147673][T10962] tipc: Disabling bearer [ 242.380830][T10973] syzkaller0: entered promiscuous mode [ 242.380853][T10973] syzkaller0: entered allmulticast mode [ 242.578480][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1539'. [ 242.697145][T10977] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 243.340133][T10987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.358752][T10987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.524165][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.524210][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.524242][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.524272][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.615292][T10995] syzkaller0: left promiscuous mode [ 243.615315][T10995] syzkaller0: left allmulticast mode [ 243.805845][T11002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1547'. [ 243.936089][T11006] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 243.937088][T11009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1549'. [ 243.959534][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.993311][T11009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.997635][T11009] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.019652][T11007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.085186][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.307170][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'. [ 246.306993][T11062] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.322908][T11062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.367429][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1563'. [ 246.503967][T11062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.515299][T11062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.523837][T11062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.530903][T11062] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 246.590351][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.590457][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.595171][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.595306][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.679161][ T8242] bridge0: port 3(vlan2) entered blocking state [ 246.679326][ T8242] bridge0: port 3(vlan2) entered forwarding state [ 247.768121][ T7787] tipc: Subscription rejected, illegal request [ 247.888163][ T30] audit: type=1800 audit(1791016887.243:3): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1573" name=CB dev="tmpfs" ino=1659 res=0 errno=0 [ 248.000862][T11132] netlink: 'syz.1.1572': attribute type 8 has an invalid length. [ 248.037775][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 248.101230][T11132] veth7: entered allmulticast mode [ 248.302734][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1576'. [ 248.302758][T11146] openvswitch: netlink: Flow actions attr not present in new flow. [ 248.351019][T11145] 0: reclassify loop, rule prio 0, protocol 03 [ 249.153601][T11162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.159719][T11164] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1585'. [ 249.160220][T11164] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 249.224600][T11167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.294761][T11162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.324462][T11172] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 249.753876][T11183] xt_l2tp: invalid flags combination: 8 [ 249.776500][T11185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1594'. [ 249.838735][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1595'. [ 249.876938][T11185] syzkaller0: entered promiscuous mode [ 249.876960][T11185] syzkaller0: entered allmulticast mode [ 249.877544][T11188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1595'. [ 249.879129][T11188] syzkaller1: entered promiscuous mode [ 249.879148][T11188] syzkaller1: entered allmulticast mode [ 250.043310][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1597'. [ 250.043341][T11193] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 251.228160][T11230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1609'. [ 251.228195][T11230] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 251.385070][T11234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1611'. [ 251.389560][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1611'. [ 251.478218][T11239] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1613'. [ 251.478244][T11239] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1613'. [ 251.681129][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1616'. [ 252.104792][T11261] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20001 [ 252.294603][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 252.294630][T11267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1622'. [ 252.294646][T11267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1622'. [ 252.296935][T11267] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1622'. [ 252.298195][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 253.907925][T11319] syzkaller0: entered promiscuous mode [ 253.907948][T11319] syzkaller0: entered allmulticast mode [ 253.923940][T11320] netlink: 'syz.0.1643': attribute type 23 has an invalid length. [ 253.923964][T11320] netlink: 'syz.0.1643': attribute type 11 has an invalid length. [ 255.185187][T11349] bridge0: port 3(vlan2) entered disabled state [ 255.185391][T11349] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.185932][T11349] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.440336][T11349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.466118][T11349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.701268][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.273934][T11421] __nla_validate_parse: 17 callbacks suppressed [ 257.273958][T11421] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1684'. [ 257.546781][T11422] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 257.729174][T11443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1693'. [ 257.729199][T11443] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1693'. [ 258.019379][T11420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1686'. [ 258.321056][T11466] x_tables: duplicate underflow at hook 4 [ 258.403858][T11472] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1707'. [ 258.403881][T11472] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1707'. [ 259.244117][T11501] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1720'. [ 259.244141][T11501] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1720'. [ 259.367276][T11504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1722'. [ 259.367988][T11504] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1722'. [ 259.595990][T11520] ip_tables: iptables: counters copy to user failed while replacing table [ 259.908889][T11533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.353152][T11561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.678399][T11600] ip_tables: iptables: counters copy to user failed while replacing table [ 264.335529][T11628] __nla_validate_parse: 11 callbacks suppressed [ 264.335550][T11628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1772'. [ 264.615524][T11641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1778'. [ 264.615557][T11641] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 264.876536][T11659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1785'. [ 264.876571][T11659] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 265.430260][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 265.589893][T11698] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1803'. [ 265.798886][T11712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'. [ 265.824382][T11712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'. [ 265.828996][T11715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'. [ 265.830297][T11715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1811'. [ 265.969618][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1810'. [ 266.509504][T11735] IPv6: NLM_F_CREATE should be specified when creating new route [ 266.885625][T11744] syzkaller1: entered promiscuous mode [ 266.885649][T11744] syzkaller1: entered allmulticast mode [ 268.320334][T11817] syzkaller1: entered promiscuous mode [ 268.320358][T11817] syzkaller1: entered allmulticast mode [ 268.321266][T11817] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 268.447448][T11821] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 268.822592][T11846] xt_hashlimit: size too large, truncated to 1048576 [ 269.101162][T11858] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 269.352892][T11871] nbd3: detected capacity change from 0 to 63 [ 269.373359][T11871] block nbd3: NBD_DISCONNECT [ 269.429578][T11876] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.454406][T11871] block nbd3: Disconnected due to user request. [ 269.454446][T11871] block nbd3: shutting down sockets [ 269.464182][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.464500][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.496222][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 269.496360][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 269.496415][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 269.496439][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.496494][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 269.498036][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 269.498064][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.498413][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 269.498432][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 269.498447][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 269.504997][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 269.505028][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 269.505045][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 269.505222][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 269.505381][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 269.505532][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.505636][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.505729][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 269.508335][T11601] ldm_validate_partition_table(): Disk read failed. [ 269.510741][T11601] Dev nbd3: unable to read RDB block 0 [ 269.517815][T11601] nbd3: unable to read par ** replaying previous printk message ** [ 269.517815][T11601] nbd3: unable to read partition table [ 269.547484][T11601] ldm_validate_partition_table(): Disk read failed. [ 269.554998][T11601] Dev nbd3: unable to read RDB block 0 [ 269.557434][T11601] nbd3: unable to read partition table [ 269.676477][T11601] [ 269.706478][T11601] ====================================================== [ 269.713510][T11601] WARNING: possible circular locking dependency detected [ 269.720532][T11601] syzkaller #0 Not tainted [ 269.724950][T11601] ------------------------------------------------------ [ 269.731964][T11601] udevd/11601 is trying to acquire lock: [ 269.737581][T11601] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x5f/0x610 [ 269.747479][T11601] [ 269.747479][T11601] but task is already holding lock: [ 269.754847][T11601] ffffffff905f2d40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 269.765380][T11601] [ 269.765380][T11601] which lock already depends on the new lock. [ 269.765380][T11601] [ 269.775784][T11601] [ 269.775784][T11601] the existing dependency chain (in reverse order) is: [ 269.785067][T11601] [ 269.785067][T11601] -> #8 (uevent_sock_mutex){+.+.}-{4:4}: [ 269.792915][T11601] __mutex_lock+0x19d/0x1550 [ 269.798046][T11601] kobject_uevent_net_broadcast+0x27e/0x560 [ 269.804466][T11601] kobject_uevent_env+0x566/0x9e0 [ 269.810026][T11601] device_add+0x544/0xb80 [ 269.814887][T11601] device_create+0x269/0x300 [ 269.820013][T11601] msr_device_create+0x33/0x50 [ 269.825313][T11601] cpuhp_invoke_callback+0x434/0x810 [ 269.831135][T11601] cpuhp_thread_fun+0x362/0x780 [ 269.836522][T11601] smpboot_thread_fn+0x565/0xa70 [ 269.841984][T11601] kthread+0x38b/0x480 [ 269.846571][T11601] ret_from_fork+0x514/0xb70 [ 269.851691][T11601] ret_from_fork_asm+0x1a/0x30 [ 269.856995][T11601] [ 269.856995][T11601] -> #7 (cpuhp_state-up){+.+.}-{0:0}: [ 269.864552][T11601] cpuhp_thread_fun+0x127/0x780 [ 269.869946][T11601] smpboot_thread_fn+0x565/0xa70 [ 269.875410][T11601] kthread+0x38b/0x480 [ 269.879990][T11601] ret_from_fork+0x514/0xb70 [ 269.885116][T11601] ret_from_fork_asm+0x1a/0x30 [ 269.890426][T11601] [ 269.890426][T11601] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 269.898154][T11601] cpus_read_lock+0x42/0x160 [ 269.903272][T11601] static_key_slow_inc+0x12/0x30 [ 269.908735][T11601] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 269.914978][T11601] nbd_genl_foreach_sock+0x265/0x450 [ 269.920785][T11601] nbd_genl_reconfigure+0xbbb/0x1040 [ 269.926790][T11601] genl_family_rcv_msg_doit+0x233/0x340 [ 269.932870][T11601] genl_rcv_msg+0x614/0x7a0 [ 269.937900][T11601] netlink_rcv_skb+0x226/0x4a0 [ 269.943177][T11601] genl_rcv+0x28/0x40 [ 269.947677][T11601] netlink_unicast+0x7bd/0x940 [ 269.952957][T11601] netlink_sendmsg+0x813/0xb40 [ 269.958228][T11601] sock_sendmsg_nosec+0x14e/0x190 [ 269.963762][T11601] ____sys_sendmsg+0x54e/0x850 [ 269.969044][T11601] ___sys_sendmsg+0x2a5/0x360 [ 269.974230][T11601] __x64_sys_sendmsg+0x1b1/0x290 [ 269.979680][T11601] do_syscall_64+0x166/0x520 [ 269.984789][T11601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.991190][T11601] [ 269.991190][T11601] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 269.998822][T11601] __mutex_lock+0x19d/0x1550 [ 270.003935][T11601] nbd_queue_rq+0x373/0xff0 [ 270.008948][T11601] blk_mq_dispatch_rq_list+0x499/0x1990 [ 270.015009][T11601] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 270.021848][T11601] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 270.028425][T11601] blk_mq_run_work_fn+0x16c/0x300 [ 270.033988][T11601] process_scheduled_works+0xc3d/0x1630 [ 270.040057][T11601] worker_thread+0xa47/0xfb0 [ 270.045163][T11601] kthread+0x38b/0x480 [ 270.049743][T11601] ret_from_fork+0x514/0xb70 [ 270.054854][T11601] ret_from_fork_asm+0x1a/0x30 [ 270.060220][T11601] [ 270.060220][T11601] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 270.067420][T11601] __mutex_lock+0x19d/0x1550 [ 270.072532][T11601] nbd_queue_rq+0xc1/0xff0 [ 270.077460][T11601] blk_mq_dispatch_rq_list+0x499/0x1990 [ 270.083513][T11601] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 270.090353][T11601] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 270.096843][T11601] blk_mq_run_work_fn+0x16c/0x300 [ 270.102384][T11601] process_scheduled_works+0xc3d/0x1630 [ 270.108440][T11601] worker_thread+0xa47/0xfb0 [ 270.113543][T11601] kthread+0x38b/0x480 [ 270.118125][T11601] ret_from_fork+0x514/0xb70 [ 270.123255][T11601] ret_from_fork_asm+0x1a/0x30 [ 270.128545][T11601] [ 270.128545][T11601] -> #3 (set->srcu){.+.+}-{0:0}: [ 270.135666][T11601] __synchronize_srcu+0xc9/0x2f0 [ 270.141115][T11601] elevator_switch+0x1e8/0x7b0 [ 270.146396][T11601] elevator_change+0x2fa/0x480 [ 270.151671][T11601] elevator_set_default+0x375/0x440 [ 270.157377][T11601] blk_register_queue+0x3f3/0x4e0 [ 270.162913][T11601] __add_disk+0x6b8/0xdb0 [ 270.167758][T11601] add_disk_fwnode+0x100/0x3a0 [ 270.173033][T11601] nbd_dev_add+0x733/0xb60 [ 270.177960][T11601] nbd_init+0x168/0x1f0 [ 270.182623][T11601] do_one_initcall+0x250/0x870 [ 270.187900][T11601] do_initcall_level+0x10a/0x1a0 [ 270.193350][T11601] do_initcalls+0x59/0xa0 [ 270.198193][T11601] kernel_init_freeable+0x29d/0x3e0 [ 270.203904][T11601] kernel_init+0x22/0x1d0 [ 270.208741][T11601] ret_from_fork+0x514/0xb70 [ 270.213848][T11601] ret_from_fork_asm+0x1a/0x30 [ 270.219129][T11601] [ 270.219129][T11601] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 270.226947][T11601] __mutex_lock+0x19d/0x1550 [ 270.232051][T11601] elevator_change+0x1af/0x480 [ 270.237323][T11601] elevator_set_none+0xb5/0x140 [ 270.242684][T11601] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 270.249003][T11601] nbd_start_device+0x189/0xb30 [ 270.254361][T11601] nbd_genl_connect+0x167d/0x1cd0 [ 270.259892][T11601] genl_family_rcv_msg_doit+0x233/0x340 [ 270.265957][T11601] genl_rcv_msg+0x614/0x7a0 [ 270.270968][T11601] netlink_rcv_skb+0x226/0x4a0 [ 270.276240][T11601] genl_rcv+0x28/0x40 [ 270.280729][T11601] netlink_unicast+0x7bd/0x940 [ 270.286006][T11601] netlink_sendmsg+0x813/0xb40 [ 270.291276][T11601] sock_sendmsg_nosec+0x14e/0x190 [ 270.296808][T11601] ____sys_sendmsg+0x54e/0x850 [ 270.302082][T11601] ___sys_sendmsg+0x2a5/0x360 [ 270.307276][T11601] __x64_sys_sendmsg+0x1b1/0x290 [ 270.312724][T11601] do_syscall_64+0x166/0x520 [ 270.317829][T11601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.324231][T11601] [ 270.324231][T11601] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 270.332823][T11601] blk_alloc_queue+0x544/0x690 [ 270.338096][T11601] __blk_mq_alloc_disk+0x194/0x390 [ 270.343725][T11601] nbd_dev_add+0x494/0xb60 [ 270.348650][T11601] nbd_init+0x168/0x1f0 [ 270.353316][T11601] do_one_initcall+0x250/0x870 [ 270.358589][T11601] do_initcall_level+0x10a/0x1a0 [ 270.364042][T11601] do_initcalls+0x59/0xa0 [ 270.368882][T11601] kernel_init_freeable+0x29d/0x3e0 [ 270.374595][T11601] kernel_init+0x22/0x1d0 [ 270.379432][T11601] ret_from_fork+0x514/0xb70 [ 270.384539][T11601] ret_from_fork_asm+0x1a/0x30 [ 270.389817][T11601] [ 270.389817][T11601] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 270.397105][T11601] __lock_acquire+0x164c/0x2de0 [ 270.402473][T11601] lock_acquire+0x115/0x350 [ 270.407483][T11601] fs_reclaim_acquire+0x71/0x100 [ 270.412925][T11601] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 270.419247][T11601] __alloc_skb+0x27a/0x7a0 [ 270.424176][T11601] alloc_uevent_skb+0x7d/0x230 [ 270.429490][T11601] kobject_uevent_net_broadcast+0x2fa/0x560 [ 270.435907][T11601] kobject_uevent_env+0x566/0x9e0 [ 270.441451][T11601] nbd_config_put+0x2c8/0x7e0 [ 270.446656][T11601] nbd_release+0xfe/0x140 [ 270.451502][T11601] bdev_release+0x571/0x690 [ 270.456522][T11601] blkdev_release+0x15/0x20 [ 270.461543][T11601] __fput+0x418/0xa50 [ 270.466042][T11601] fput_close_sync+0x11f/0x240 [ 270.471325][T11601] __x64_sys_close+0x7e/0x110 [ 270.476531][T11601] do_syscall_64+0x166/0x520 [ 270.481651][T11601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.488065][T11601] [ 270.488065][T11601] other info that might help us debug this: [ 270.488065][T11601] [ 270.498283][T11601] Chain exists of: [ 270.498283][T11601] fs_reclaim --> cpuhp_state-up --> uevent_sock_mutex [ 270.498283][T11601] [ 270.510971][T11601] Possible unsafe locking scenario: [ 270.510971][T11601] [ 270.518408][T11601] CPU0 CPU1 [ 270.523755][T11601] ---- ---- [ 270.529104][T11601] lock(uevent_sock_mutex); [ 270.533684][T11601] lock(cpuhp_state-up); [ 270.540524][T11601] lock(uevent_sock_mutex); [ 270.547630][T11601] lock(fs_reclaim); [ 270.551599][T11601] [ 270.551599][T11601] *** DEADLOCK *** [ 270.551599][T11601] [ 270.559731][T11601] locks held by udevd/11601: 3, last CPU#0: [ 270.565704][T11601] #0: ffff888027263350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1b8/0x690 [ 270.575290][T11601] #1: ffff88802725da60 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x30/0xa0 [ 270.586001][T11601] #2: ffffffff905f2d40 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 270.597926][T11601] [ 270.597926][T11601] stack backtrace: [ 270.603829][T11601] CPU: 0 UID: 0 PID: 11601 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 270.612754][T11601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.622812][T11601] Call Trace: [ 270.626080][T11601] [ 270.629002][T11601] dump_stack_lvl+0xe8/0x150 [ 270.633589][T11601] print_circular_bug+0x2e2/0x300 [ 270.638608][T11601] check_noncircular+0x12f/0x150 [ 270.643537][T11601] __lock_acquire+0x164c/0x2de0 [ 270.648379][T11601] ? blkdev_release+0x15/0x20 [ 270.653140][T11601] ? __x64_sys_close+0x7e/0x110 [ 270.657983][T11601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.664050][T11601] lock_acquire+0x115/0x350 [ 270.668545][T11601] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 270.674537][T11601] ? __alloc_skb+0x27a/0x7a0 [ 270.679115][T11601] fs_reclaim_acquire+0x71/0x100 [ 270.684039][T11601] ? kmem_cache_alloc_node_noprof+0x5f/0x610 [ 270.690012][T11601] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 270.695817][T11601] ? __alloc_skb+0x18d/0x7a0 [ 270.700398][T11601] ? __alloc_skb+0x27a/0x7a0 [ 270.705010][T11601] ? __alloc_skb+0x18d/0x7a0 [ 270.709590][T11601] __alloc_skb+0x27a/0x7a0 [ 270.713999][T11601] alloc_uevent_skb+0x7d/0x230 [ 270.718753][T11601] kobject_uevent_net_broadcast+0x2fa/0x560 [ 270.724638][T11601] kobject_uevent_env+0x566/0x9e0 [ 270.729655][T11601] nbd_config_put+0x2c8/0x7e0 [ 270.734323][T11601] ? __pfx_nbd_config_put+0x10/0x10 [ 270.739516][T11601] ? do_raw_spin_unlock+0xf5/0x200 [ 270.744622][T11601] nbd_release+0xfe/0x140 [ 270.748942][T11601] ? __pfx_nbd_release+0x10/0x10 [ 270.753871][T11601] bdev_release+0x571/0x690 [ 270.758368][T11601] ? __pfx_blkdev_release+0x10/0x10 [ 270.763554][T11601] blkdev_release+0x15/0x20 [ 270.768047][T11601] __fput+0x418/0xa50 [ 270.772026][T11601] fput_close_sync+0x11f/0x240 [ 270.776780][T11601] ? __pfx_fput_close_sync+0x10/0x10 [ 270.782060][T11601] __x64_sys_close+0x7e/0x110 [ 270.786731][T11601] do_syscall_64+0x166/0x520 [ 270.791314][T11601] ? trace_irq_disable+0x3b/0x140 [ 270.796327][T11601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.802381][T11601] ? clear_bhb_loop+0x70/0xc0 [ 270.807048][T11601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.812932][T11601] RIP: 0033:0x7f43880a7407 [ 270.817349][T11601] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 270.836942][T11601] RSP: 002b:00007ffe45442ef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 270.845347][T11601] RAX: ffffffffffffffda RBX: 00007f438874b880 RCX: 00007f43880a7407 [ 270.853310][T11601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 270.861280][T11601] RBP: 00007f438874b6e8 R08: 0000000000000000 R09: 0000000000000000 [ 270.869239][T11601] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 270.877199][T11601] R13: 0000558e240b7190 R14: 0000000000000008 R15: 0000558e240c6f10 [ 270.885196][T11601]