last executing test programs: 9.385919234s ago: executing program 1 (id=16034): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) 9.103075837s ago: executing program 1 (id=16037): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 8.346481174s ago: executing program 1 (id=16044): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x38}}}}, ["", "", "", "", "", "", ""]}, 0x20}}, 0x840) unshare(0x66000080) 7.035873362s ago: executing program 2 (id=16059): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x44c, 0x31, 0x3d, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1e, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x8, 0x6, 0x8000, 0x5, 0x1, 0x7ff, 0x1, 0x10000, 0x7, 0x0, 0x10000, 0x4, 0x9, 0x6, 0x5, 0x8, 0x1000, 0x0, 0x1, 0x4, 0x4, 0xa0, 0x32d4, 0xa, 0x80000000, 0x10000, 0x4f7, 0x0, 0x9, 0x3, 0xfffffff5, 0x7, 0x3, 0x4, 0x80ed, 0x7fff, 0xfffffff9, 0x4, 0x4, 0x6, 0x0, 0xb6, 0x7f, 0x43, 0x2, 0xfffffffb, 0x1, 0x8, 0x3, 0x9, 0x4, 0x1, 0x905, 0x7, 0x4, 0x3, 0x1, 0x7, 0xffffffff, 0x58, 0x9, 0x7ff, 0xad, 0x1002, 0xffffff61, 0x8a8, 0x1, 0x0, 0x8, 0x5, 0xffff8000, 0x1, 0x3, 0xffffffff, 0x4, 0xb, 0x1, 0x42, 0x10001, 0x302160e2, 0x0, 0x1, 0xff, 0x4, 0x80, 0x3, 0x4, 0x1, 0x7, 0x1, 0x7ff, 0xfffffffc, 0x81, 0x7, 0x66d3, 0xffffbfff, 0xef2, 0x9, 0x6, 0x7fffffff, 0xe52, 0x7, 0x4, 0x2, 0x0, 0xffffffff, 0x7fffffff, 0x3, 0x2, 0x2, 0x2, 0x9265, 0x3, 0x8, 0xff, 0xb58, 0xe3, 0x0, 0x7000, 0x9ae, 0x2, 0x0, 0x550, 0x2, 0x59, 0x4ca, 0x559b, 0x0, 0x2, 0x2, 0x400, 0x37, 0x1ff, 0x1, 0x6, 0x4, 0xc40, 0x7, 0x1, 0x74, 0x5b, 0x9, 0x10000, 0x401, 0xc, 0x59b1, 0xd117, 0xf, 0x7, 0x4, 0xff, 0x10080, 0x80000001, 0x9, 0x1, 0x2, 0x2, 0x8, 0xfffffbff, 0x43, 0x1, 0x8, 0x2, 0x38a9, 0x8568, 0x8, 0x3, 0x80000001, 0x4404, 0x1, 0x1020, 0x3ff, 0xf4d, 0x63ae, 0xffffff00, 0xffffffff, 0x9, 0x81, 0xd8, 0x8, 0x1, 0xc1e4, 0xfffffff9, 0x8, 0x3, 0xb, 0x7, 0x1, 0x0, 0x8, 0xc, 0x7, 0x1, 0xe, 0x0, 0x6b687e82, 0x8, 0x8, 0x0, 0x66, 0x7, 0x8, 0x7, 0x3, 0x8, 0x0, 0x6, 0x80, 0x6, 0x68f, 0x7, 0x2000003, 0x7, 0x8, 0xfff, 0x2, 0xe7d, 0x4, 0x5f1, 0x3, 0x7, 0x9, 0x4, 0x1ff, 0xfffffffd, 0xf45b, 0x8, 0x76, 0x1, 0x2, 0x800, 0x4, 0x326, 0x8, 0x8, 0x80000000, 0x400, 0x2, 0x800000, 0x1e, 0x40, 0x5, 0x4, 0x9, 0x2, 0xffff, 0x80000001, 0x8, 0x1c000000, 0x84d1, 0xff, 0x84, 0x9, 0x2, 0x9]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44c}}, 0x8000) 2.885058556s ago: executing program 2 (id=16074): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2.248340935s ago: executing program 4 (id=16079): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x2, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.246356509s ago: executing program 2 (id=16080): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x2, @a_listen={0x9, 0x3, 0x6, 0x80, 0x2, 0x6, 0x5, "", 0x6, 0x8, 0xd, 0x9, 0xc, "2eb1a87670d39de091b2c162"}}, 0x1b) 2.187983261s ago: executing program 3 (id=16081): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) close(0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) 2.043464711s ago: executing program 4 (id=16082): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) listen(r0, 0xb5d6) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 1.859372065s ago: executing program 4 (id=16083): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r0, 0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x5}}}}}, 0x36) 1.85796049s ago: executing program 3 (id=16084): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x400}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="ef", 0x1}], 0x1, 0x0, 0x0, 0x4060019}, 0x20000041) 1.73541058s ago: executing program 0 (id=16085): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0xb, 0x8, 0x6}}]}}}]}, 0x5c}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 1.538156478s ago: executing program 4 (id=16086): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2, 0x81}, &(0x7f00000000c0)=0x8) 1.452377067s ago: executing program 0 (id=16087): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x28) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x3, 0xb}, &(0x7f0000000000)=0x90) 1.423599042s ago: executing program 4 (id=16088): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2b, 0x80801, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, 0x0, 0x4) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) 1.421970218s ago: executing program 3 (id=16098): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendto$packet(r0, &(0x7f0000000240)="3f531c", 0x3, 0x0, &(0x7f0000000100)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1.327636969s ago: executing program 0 (id=16089): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close(r1) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x1, 0x2, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 1.320637032s ago: executing program 1 (id=16090): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x2e910fbf2aba479e}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r2, 0x5}, 0x8) 1.261704297s ago: executing program 3 (id=16091): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r3, r1, 0x4, r1}, 0x10) 1.15286516s ago: executing program 1 (id=16092): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff2", @ANYRES8], 0x84}, 0x1, 0x0, 0x0, 0x4024054}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.151828515s ago: executing program 2 (id=16093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@delchain={0x38, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40054}, 0xc014) 1.016959527s ago: executing program 3 (id=16094): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @empty, @empty}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4092, 0xffc}], 0x2}, 0x200}], 0x1, 0x0, 0x0) 856.00135ms ago: executing program 0 (id=16095): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 701.970865ms ago: executing program 0 (id=16096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}}}}}}, 0x2e) 476.850774ms ago: executing program 2 (id=16097): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 434.860987ms ago: executing program 1 (id=16099): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$TIPC_NL_MON_GET(r0, 0x0, 0x458d0) r1 = socket(0x14, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x400261f2, &(0x7f00000001c0)={'wlan1\x00'}) 225.685123ms ago: executing program 4 (id=16100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 183.839822ms ago: executing program 0 (id=16101): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 140.833567ms ago: executing program 2 (id=16102): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 0s ago: executing program 3 (id=16103): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r0, &(0x7f0000000000)="01", 0x1, 0xc000, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001c80)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x8000) kernel console output (not intermixed with test programs): ink: 8 bytes leftover after parsing attributes in process `syz.3.11716'. [ 621.365981][T30344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11717'. [ 621.387472][T30344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11717'. [ 622.006247][T30379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11734'. [ 622.040530][T30379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.061025][T30379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.072042][T30379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.085480][T30379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.094228][T30379] batman_adv: batadv0: Interface deactivated: gretap1 [ 622.101223][T30379] batman_adv: batadv0: Removing interface: gretap1 [ 622.658404][T30419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11754'. [ 622.670145][T30419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11754'. [ 622.813984][T30424] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 622.830168][T30424] pim6reg0: persist disabled [ 623.377198][T30457] sctp: [Deprecated]: syz.1.11772 (pid 30457) Use of int in maxseg socket option. [ 623.377198][T30457] Use struct sctp_assoc_value instead [ 623.550705][T30470] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11779'. [ 624.252945][T30496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11789'. [ 625.262617][T30536] netlink: 'syz.1.11807': attribute type 3 has an invalid length. [ 625.281848][T30536] netlink: 'syz.1.11807': attribute type 3 has an invalid length. [ 625.351035][T30536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11807'. [ 625.818190][T30564] netlink: 332 bytes leftover after parsing attributes in process `syz.0.11819'. [ 625.830882][T30564] netlink: 'syz.0.11819': attribute type 9 has an invalid length. [ 626.311630][T30593] pim6reg0: tun_chr_ioctl cmd 35111 [ 626.963289][T30618] __nla_validate_parse: 2 callbacks suppressed [ 626.970015][T30618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11842'. [ 626.987040][T30618] ip6gretap0: left promiscuous mode [ 627.256165][T30630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11848'. [ 627.706450][T30660] sctp: [Deprecated]: syz.1.11860 (pid 30660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 627.706450][T30660] Use struct sctp_sack_info instead [ 627.863176][T30669] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11862'. [ 628.421367][T30693] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11875'. [ 628.453819][T30693] tipc: Invalid UDP bearer configuration [ 628.453917][T30693] tipc: Enabling of bearer rejected, failed to enable media [ 628.811955][T30710] netlink: 'syz.2.11883': attribute type 12 has an invalid length. [ 628.820216][T30710] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.11883'. [ 629.758617][T30740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11897'. [ 629.779342][T30740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11897'. [ 629.812400][T30740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11897'. [ 629.839786][T30740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11897'. [ 629.860519][T30740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11897'. [ 630.222010][T30767] netlink: 'syz.0.11908': attribute type 2 has an invalid length. [ 630.275311][T30767] dummy0 (unregistering): left allmulticast mode [ 630.741195][T30793] IPVS: persistence engine module ip_vs_pe_À not found [ 630.910070][ T1158] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.934572][ T1158] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.969752][ T1158] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.008459][ T1158] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.347409][T30836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.367302][T30836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.062198][T30875] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 632.081823][T30875] dvmrp1: linktype set to 0 [ 632.392031][T30896] __nla_validate_parse: 6 callbacks suppressed [ 632.392054][T30896] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.11966'. [ 633.614368][T30958] netlink: 'syz.1.11993': attribute type 1 has an invalid length. [ 633.852819][T30970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.124305][T30985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12006'. [ 634.139319][T30985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12006'. [ 634.918854][T31019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12023'. [ 634.950794][T31019] netlink: 'syz.4.12023': attribute type 30 has an invalid length. [ 634.963562][T31019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12023'. [ 635.262203][T31028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12027'. [ 635.281180][T31028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12027'. [ 635.317818][T31028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12027'. [ 635.333647][T31028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12027'. [ 635.376208][T31028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12027'. [ 635.842444][T31049] erspan0: entered promiscuous mode [ 636.045669][T31062] netlink: 'syz.4.12043': attribute type 1 has an invalid length. [ 636.079506][T31062] netlink: 'syz.4.12043': attribute type 2 has an invalid length. [ 636.107161][T31062] netlink: 'syz.4.12043': attribute type 1 has an invalid length. [ 636.775402][T31098] netlink: 'syz.2.12057': attribute type 30 has an invalid length. [ 636.847916][T31101] netlink: 'syz.2.12057': attribute type 30 has an invalid length. [ 637.803572][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 638.535100][T31170] __nla_validate_parse: 4 callbacks suppressed [ 638.535121][T31170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12088'. [ 638.579350][T31170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12088'. [ 639.471040][T31207] macvtap0: entered allmulticast mode [ 639.485038][T31207] veth0_to_bridge: entered allmulticast mode [ 639.502012][T31207] veth0_to_bridge: left allmulticast mode [ 639.624579][T31206] bond4 (unregistering): Released all slaves [ 641.490823][T31296] tap0: tun_chr_ioctl cmd 1074025677 [ 641.508404][T31296] tap0: linktype set to 774 [ 641.957675][T31317] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12154'. [ 642.119717][T31324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12159'. [ 642.225897][T31324] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 642.288857][T31324] bond5 (unregistering): Released all slaves [ 643.168092][T31362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12174'. [ 644.382330][T31426] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.607482][T31438] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12211'. [ 644.759744][T31448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12215'. [ 644.801643][T31448] netlink: 'syz.4.12215': attribute type 7 has an invalid length. [ 644.838254][T31448] netlink: 'syz.4.12215': attribute type 8 has an invalid length. [ 644.851690][T31448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12215'. [ 644.932410][T31457] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12219'. [ 645.515218][T31495] netlink: 'syz.2.12237': attribute type 3 has an invalid length. [ 645.550765][T31495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12237'. [ 645.921591][T31518] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 647.068329][T31573] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12272'. [ 647.089082][T31573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12272'. [ 647.723093][T31612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12289'. [ 648.453961][T31643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12302'. [ 648.572177][T31648] tun0: tun_chr_ioctl cmd 1074025672 [ 648.584955][T31648] tun0: ignored: set checksum disabled [ 648.811883][T31663] netlink: 67 bytes leftover after parsing attributes in process `syz.3.12309'. [ 648.831225][T31657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.840504][T31657] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.851309][T31657] veth1_to_hsr: entered promiscuous mode [ 648.881703][T31657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.954668][T31657] bond_slave_0: entered promiscuous mode [ 648.965706][T31657] bond_slave_1: entered promiscuous mode [ 648.975286][T31657] team_slave_0: entered promiscuous mode [ 648.984785][T31657] team_slave_1: entered promiscuous mode [ 649.001752][T31657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.012623][T31657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.027729][T31657] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 649.038634][T31657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.058434][T31657] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.067452][T31657] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.077692][T31657] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.087696][T31657] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.139845][T31657] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 649.158433][T31657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 649.172179][T31657] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 649.222048][T31663] A link change request failed with some changes committed already. Interface geneve5 may have been left with an inconsistent configuration, please check. [ 649.252444][ T1182] bridge0: port 1(() entered blocking state [ 649.258596][ T1182] bridge0: port 1(() entered forwarding state [ 649.280712][ T1182] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.288028][ T1182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.352683][T18430] xfrm0 speed is unknown, defaulting to 1000 [ 649.359351][ T1158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.369013][T18430] syz0: Port: 1 Link ACTIVE [ 649.374998][ T1158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.391395][T18432] xfrm0 speed is unknown, defaulting to 1000 [ 649.408226][ T1158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.424560][ T1158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.067777][T31711] netlink: 'syz.1.12335': attribute type 14 has an invalid length. [ 650.826838][T31717] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.047562][T31740] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12346'. [ 651.094120][T31740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12346'. [ 651.119476][T31740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12346'. [ 651.415819][T31764] xt_hashlimit: max too large, truncated to 1048576 [ 651.448255][T31764] No such timeout policy "syz1" [ 652.295415][T31800] netlink: 192 bytes leftover after parsing attributes in process `syz.3.12375'. [ 653.070324][T31843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12394'. [ 653.149265][T31843] gretap2: entered allmulticast mode [ 653.585699][T31876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12411'. [ 654.212875][T31910] bond0: entered promiscuous mode [ 654.225855][T31910] bond_slave_0: entered promiscuous mode [ 654.237482][T31910] bond_slave_1: entered promiscuous mode [ 654.252381][T31910] team0: entered promiscuous mode [ 654.275406][T31910] team_slave_0: entered promiscuous mode [ 654.293781][T31910] team_slave_1: entered promiscuous mode [ 654.320291][T31910] batadv_slave_0: entered promiscuous mode [ 654.333759][T31910] batadv_slave_0: left promiscuous mode [ 654.346788][T31910] bond0: left promiscuous mode [ 654.355775][T31910] bond_slave_0: left promiscuous mode [ 654.374236][T31910] bond_slave_1: left promiscuous mode [ 654.380142][T31910] team0: left promiscuous mode [ 654.386813][T31910] team_slave_0: left promiscuous mode [ 654.404064][T31910] team_slave_1: left promiscuous mode [ 654.431305][T31916] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12430'. [ 654.443965][T31916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12430'. [ 654.670489][T31928] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 654.992518][T31947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12442'. [ 655.535949][T31977] xt_hashlimit: size too large, truncated to 1048576 [ 655.627407][T31980] netlink: 'syz.0.12457': attribute type 3 has an invalid length. [ 655.832869][T31990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12461'. [ 656.055165][T31996] sctp: [Deprecated]: syz.0.12463 (pid 31996) Use of struct sctp_assoc_value in delayed_ack socket option. [ 656.055165][T31996] Use struct sctp_sack_info instead [ 656.693348][T32026] veth0: entered promiscuous mode [ 656.715414][T32025] veth0: left promiscuous mode [ 657.456774][T32072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12501'. [ 657.667919][T32087] netlink: 'syz.0.12509': attribute type 12 has an invalid length. [ 657.680674][T32087] netlink: 'syz.0.12509': attribute type 11 has an invalid length. [ 657.688725][T32087] netlink: 212004 bytes leftover after parsing attributes in process `syz.0.12509'. [ 657.987564][T32101] 8021q: adding VLAN 0 to HW filter on device bond4 [ 658.136202][T32116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.293764][T32125] netlink: 'syz.0.12523': attribute type 15 has an invalid length. [ 659.410104][T32150] gretap0: entered promiscuous mode [ 659.433116][T32153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12538'. [ 659.468619][T32153] gretap0: left promiscuous mode [ 660.992735][T32240] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12577'. [ 661.020500][T32237] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12577'. [ 661.062204][T32244] C: renamed from veth1_to_team (while UP) [ 661.078355][T32244] netlink: 'syz.2.12579': attribute type 3 has an invalid length. [ 661.091836][T32244] netlink: 116 bytes leftover after parsing attributes in process `syz.2.12579'. [ 661.103623][T32244] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 661.218886][T32248] netlink: 'syz.1.12582': attribute type 1 has an invalid length. [ 661.419047][T32261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12589'. [ 661.430085][T32261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12589'. [ 661.439361][T32261] netlink: 'syz.3.12589': attribute type 18 has an invalid length. [ 661.547063][T32267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12592'. [ 661.612301][T32269] erspan0: entered promiscuous mode [ 661.751686][T32276] erspan0: entered promiscuous mode [ 661.790745][T32280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12597'. [ 662.082356][T32293] netlink: 'syz.2.12602': attribute type 1 has an invalid length. [ 662.120543][T32293] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 662.236152][T32296] virt_wifi0 speed is unknown, defaulting to 1000 [ 662.257532][T32296] xfrm0 speed is unknown, defaulting to 1000 [ 662.351840][T32304] netlink: 'syz.2.12607': attribute type 4 has an invalid length. [ 662.535427][T32310] __nla_validate_parse: 1 callbacks suppressed [ 662.535450][T32310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12610'. [ 662.840056][T32319] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12614'. [ 664.241424][T32342] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 664.263784][T32342] syzkaller1: linktype set to 778 [ 664.308786][T32349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12627'. [ 665.048127][T32374] netlink: 'syz.3.12638': attribute type 1 has an invalid length. [ 665.056721][T32374] netlink: 92 bytes leftover after parsing attributes in process `syz.3.12638'. [ 665.457313][T32395] netlink: 'syz.4.12647': attribute type 3 has an invalid length. [ 665.731288][T32407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12654'. [ 665.747223][T32407] netlink: 'syz.1.12654': attribute type 6 has an invalid length. [ 665.756271][T32407] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12654'. [ 666.682226][T32460] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12680'. [ 666.720977][T32462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12679'. [ 666.911529][T32472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12685'. [ 667.066576][T32477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12687'. [ 668.197717][T32521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12707'. [ 668.210081][T32521] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12707'. [ 670.045386][T32608] bridge_slave_1: left promiscuous mode [ 670.051565][T32608] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.064900][T32608] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 670.226734][T32612] bond0: (slave team0): Releasing backup interface [ 670.280481][T32612] bridge_slave_0: left allmulticast mode [ 670.294260][T32612] bridge_slave_0: left promiscuous mode [ 670.313773][T32612] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.346513][T32612] bridge_slave_1: left allmulticast mode [ 670.352241][T32612] bridge_slave_1: left promiscuous mode [ 670.377085][T32612] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.418843][T32612] bond0: (slave bond_slave_0): Releasing backup interface [ 670.476284][T32612] bond0: (slave bond_slave_1): Releasing backup interface [ 670.522023][T32612] team0: Port device team_slave_0 removed [ 670.567404][T32612] team0: Port device team_slave_1 removed [ 670.586477][T32612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.604472][T32612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.634230][T32612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.654552][T32612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.669610][T32612] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 671.280408][T32660] netlink: 256 bytes leftover after parsing attributes in process `syz.0.12770'. [ 671.290166][T32660] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12770'. [ 671.949674][T32678] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12778'. [ 672.193163][T32684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12781'. [ 672.431346][T32700] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 673.796203][ T300] netlink: 27 bytes leftover after parsing attributes in process `syz.1.12818'. [ 675.322585][ T378] netlink: 'syz.3.12849': attribute type 11 has an invalid length. [ 675.608905][ T391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12855'. [ 676.510648][ T446] netlink: 80 bytes leftover after parsing attributes in process `syz.2.12884'. [ 676.837464][ T464] bond3: ARP target 9.0.0.0 is already present [ 676.862137][ T464] bond3: option arp_ip_target: invalid value (9) [ 676.890848][ T464] bond3 (unregistering): Released all slaves [ 676.959141][ T468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12893'. [ 677.103121][ T479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12896'. [ 677.132878][ T479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12896'. [ 677.147645][ T479] netlink: 'syz.1.12896': attribute type 20 has an invalid length. [ 677.476527][ T500] tipc: Enabling of bearer rejected, already enabled [ 678.378741][ T531] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12921'. [ 678.776423][ T555] netlink: 'syz.2.12930': attribute type 6 has an invalid length. [ 679.733767][ T591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12949'. [ 679.932417][ T603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12955'. [ 679.968326][ T603] bond0: Unable to set up delay as MII monitoring is disabled [ 680.567636][ T627] C: renamed from veth1_to_team (while UP) [ 680.619309][ T627] netlink: 'syz.0.12965': attribute type 8 has an invalid length. [ 680.638014][ T627] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 680.973731][ T647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12972'. [ 681.550278][ T678] tipc: Started in network mode [ 681.573757][ T678] tipc: Node identity ac14140f, cluster identity 4711 [ 681.595838][ T678] tipc: New replicast peer: 255.255.255.255 [ 681.608360][ T678] tipc: Enabled bearer , priority 5 [ 682.460578][ T736] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13012'. [ 682.685465][ T744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13017'. [ 682.727307][ T5740] tipc: Node number set to 2886997007 [ 683.994140][ T822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13051'. [ 684.279492][ T815] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.287061][ T815] bridge0: port 1(() entered disabled state [ 684.314199][ T815] bond_slave_0: left promiscuous mode [ 684.320782][ T815] bond_slave_1: left promiscuous mode [ 684.332129][ T815] team_slave_0: left promiscuous mode [ 684.339327][ T815] team_slave_1: left promiscuous mode [ 684.345347][ T815] veth1_to_hsr: left promiscuous mode [ 684.666127][ T842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13058'. [ 684.837715][ T815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.879362][ T815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.251727][ T815] bond0: left allmulticast mode [ 685.257784][ T815] bond_slave_0: left allmulticast mode [ 685.264003][ T815] bond_slave_1: left allmulticast mode [ 685.298825][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 685.305172][ T734] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.332572][ T24] syz0: Port: 1 Link DOWN [ 685.344012][ T734] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.391187][ T734] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.419189][ T734] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.429643][T20119] xfrm0 speed is unknown, defaulting to 1000 [ 685.431276][ T734] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.469214][ T734] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.506542][ T734] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.533627][ T734] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.785299][ T874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13069'. [ 685.820280][ T873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13068'. [ 686.390075][ T881] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.118257][ T881] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 687.166029][ T881] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 687.480549][ T901] pim6reg: entered allmulticast mode [ 687.511830][ T734] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.546763][ T734] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.577940][ T897] pim6reg: left allmulticast mode [ 687.668094][ T734] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.696936][ T734] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.108385][ T945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13098'. [ 688.117651][ T945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13098'. [ 688.947734][ T954] veth1: entered promiscuous mode [ 688.955668][ T957] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13103'. [ 688.966800][ T954] macsec2: entered promiscuous mode [ 688.977560][ T954] macsec2: entered allmulticast mode [ 688.994243][ T954] veth1: entered allmulticast mode [ 689.035619][ T954] veth1: left allmulticast mode [ 689.051682][ T954] veth1: left promiscuous mode [ 689.500749][ T985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13114'. [ 689.533798][ T985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13114'. [ 689.808085][ T50] block nbd6: Receive control failed (result -32) [ 690.224314][ T1020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13129'. [ 691.320951][ T13] tipc: Subscription rejected, illegal request [ 691.398647][ T1081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13148'. [ 691.514922][ T1086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13152'. [ 692.095313][ T1115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13162'. [ 692.786071][ T29] audit: type=1804 audit(1781553381.965:7): pid=1139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.13173" name="/newroot/2624/cgroup.controllers" dev="tmpfs" ino=13162 res=1 errno=0 [ 692.860657][ T29] audit: type=1800 audit(1781553381.965:8): pid=1139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13173" name="cgroup.controllers" dev="tmpfs" ino=13162 res=0 errno=0 [ 692.915750][ T29] audit: type=1800 audit(1781553381.965:9): pid=1139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13173" name="cgroup.controllers" dev="tmpfs" ino=13162 res=0 errno=0 [ 695.542879][ T29] audit: type=1804 audit(1781553384.715:10): pid=1256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.13220" name="/newroot/2666/memory.events" dev="tmpfs" ino=13380 res=1 errno=0 [ 695.623962][ T29] audit: type=1800 audit(1781553384.715:11): pid=1256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13220" name="memory.events" dev="tmpfs" ino=13380 res=0 errno=0 [ 695.702651][ T29] audit: type=1804 audit(1781553384.755:12): pid=1256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.13220" name="/newroot/2666/memory.events" dev="tmpfs" ino=13380 res=1 errno=0 [ 695.855267][ T1272] netlink: 'syz.0.13228': attribute type 3 has an invalid length. [ 696.575452][ T1315] netlink: 'syz.0.13247': attribute type 2 has an invalid length. [ 696.656705][ T1322] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 696.812312][ T1330] batadv_slave_1: entered promiscuous mode [ 696.828222][ T1329] batadv_slave_1: left promiscuous mode [ 697.511622][ T1366] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13266'. [ 697.714320][ T1379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13271'. [ 697.887181][ T1391] batadv_slave_1: entered promiscuous mode [ 697.895586][ T1390] batadv_slave_1: left promiscuous mode [ 699.189949][ T1447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13301'. [ 699.247564][ T1451] syzkaller1: entered promiscuous mode [ 699.253290][ T1451] syzkaller1: entered allmulticast mode [ 699.915474][ T1477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13313'. [ 699.939009][ T1477] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13313'. [ 699.963871][ T1477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13313'. [ 700.766519][ T1521] lo: entered allmulticast mode [ 700.772146][ T1521] lo: left allmulticast mode [ 701.834445][ T1582] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13342'. [ 701.972417][ T1584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13343'. [ 702.568729][ T1604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13352'. [ 703.008144][ T1622] netlink: 'syz.0.13361': attribute type 2 has an invalid length. [ 703.037468][ T1622] netlink: 'syz.0.13361': attribute type 2 has an invalid length. [ 703.051837][ T1626] block nbd7: Unsupported socket: should be TCP or UNIX. [ 703.149991][ T1629] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 703.353684][ T1639] netlink: 212892 bytes leftover after parsing attributes in process `syz.1.13369'. [ 703.357383][ T1644] netlink: 'syz.4.13370': attribute type 1 has an invalid length. [ 703.393663][ T1644] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13370'. [ 703.619071][ T1659] netlink: 'syz.1.13377': attribute type 1 has an invalid length. [ 703.639181][ T1658] netlink: 'syz.2.13379': attribute type 9 has an invalid length. [ 703.653610][ T1659] netlink: 'syz.1.13377': attribute type 1 has an invalid length. [ 703.668130][ T1658] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.13379'. [ 703.893300][ T1677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13387'. [ 703.959737][ T1674] pim6reg1: entered allmulticast mode [ 704.257464][ T1693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13394'. [ 704.290808][ T1697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13395'. [ 704.310580][ T1697] netlink: 'syz.0.13395': attribute type 2 has an invalid length. [ 706.943137][ T1840] netlink: 'syz.2.13464': attribute type 39 has an invalid length. [ 706.979466][ T1842] erspan0: entered promiscuous mode [ 706.987028][ T1842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13465'. [ 707.082486][ T1845] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13467'. [ 707.270025][ T1857] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.13472'. [ 707.879078][ T1881] syzkaller1: entered promiscuous mode [ 707.885816][ T1881] syzkaller1: entered allmulticast mode [ 708.473228][ T1908] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 708.561231][ T1908] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 708.976876][ T29] audit: type=1800 audit(1781553398.155:13): pid=1928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13501" name="memory.events" dev="tmpfs" ino=13294 res=0 errno=0 [ 709.016779][ T1933] __nla_validate_parse: 1 callbacks suppressed [ 709.016802][ T1933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13505'. [ 709.040003][ T1933] ip6gre2: entered promiscuous mode [ 709.046653][ T1933] ip6gre2: entered allmulticast mode [ 709.054707][ T1182] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 709.062742][ T1182] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 709.084092][ T833] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 709.267132][ T1946] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13510'. [ 709.561518][ T1961] syzkaller1: entered promiscuous mode [ 709.571755][ T1961] syzkaller1: entered allmulticast mode [ 709.721357][ T1969] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 709.730782][ T833] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 709.963704][ T833] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 710.128571][ T1993] syzkaller1: entered promiscuous mode [ 710.152385][ T1993] syzkaller1: entered allmulticast mode [ 710.454816][ T2002] pim6reg1: entered promiscuous mode [ 710.464689][ T2002] pim6reg1: entered allmulticast mode [ 710.529706][ T2009] veth1_to_bond: entered allmulticast mode [ 710.543166][ T2009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13540'. [ 710.562721][ T2009] veth1_to_bond (unregistering): left allmulticast mode [ 710.595911][ T2009] bond0: (slave bond_slave_1): Releasing backup interface [ 710.618387][ T2009] bond_slave_1 (unregistering): left promiscuous mode [ 710.760698][ T2025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13546'. [ 710.771863][ T2023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13545'. [ 711.352024][ T2046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13554'. [ 711.367377][ T2046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13554'. [ 713.323602][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 713.337633][ T2051] erspan0: left promiscuous mode [ 713.361805][ T2051] ip6gretap0: left promiscuous mode [ 713.372673][ T2058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13559'. [ 713.504122][ T2069] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13562'. [ 714.196142][ T2105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13577'. [ 714.357127][ T2113] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 715.679065][ T2186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13612'. [ 715.908031][ T29] audit: type=1804 audit(1781553405.085:14): pid=2197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.13615" name="/newroot/2714/memory.events" dev="tmpfs" ino=13616 res=1 errno=0 [ 716.612396][ T2224] virt_wifi0 speed is unknown, defaulting to 1000 [ 716.631861][ T2224] xfrm0 speed is unknown, defaulting to 1000 [ 716.984571][ T2236] trusted_key: syz.4.13632 sent an empty control message without MSG_MORE. [ 717.054169][ T832] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 717.565384][T20119] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 717.782060][ T2259] netlink: 212924 bytes leftover after parsing attributes in process `syz.4.13642'. [ 720.886903][ T2328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13672'. [ 720.909143][ T2328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13672'. [ 721.062037][ T2332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13673'. [ 722.284485][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 722.443267][ T2370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13691'. [ 722.458833][ T2372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13692'. [ 722.940119][ T2386] netlink: 'syz.3.13700': attribute type 11 has an invalid length. [ 722.963698][ T2386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13700'. [ 722.997539][ T2386] netlink: 'syz.3.13700': attribute type 11 has an invalid length. [ 723.020765][ T2386] netlink: 59 bytes leftover after parsing attributes in process `syz.3.13700'. [ 723.043718][ T2389] netlink: 116 bytes leftover after parsing attributes in process `syz.4.13698'. [ 723.380434][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13706'. [ 723.392743][ T2402] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13705'. [ 726.193274][ T2528] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.13738'. [ 726.471566][ T2538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13741'. [ 726.512188][ T2538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13741'. [ 726.596630][ T2545] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 726.732048][ T2554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.401028][ T2591] netlink: 180 bytes leftover after parsing attributes in process `syz.4.13756'. [ 727.437055][ T2589] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 727.452208][ T2594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13758'. [ 727.609625][ T2601] netlink: 'syz.1.13759': attribute type 1 has an invalid length. [ 727.626341][ T2601] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13759'. [ 728.430498][ T2647] netlink: 'syz.4.13770': attribute type 11 has an invalid length. [ 728.455546][ T2647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13770'. [ 729.026652][ T2686] netlink: 'syz.3.13775': attribute type 3 has an invalid length. [ 729.070339][ T2686] netlink: 'syz.3.13775': attribute type 3 has an invalid length. [ 729.584935][ T2716] netlink: 63 bytes leftover after parsing attributes in process `syz.1.13786'. [ 729.637573][ T2719] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13788'. [ 729.663794][ T2719] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13788'. [ 730.275471][ T2752] virt_wifi0 speed is unknown, defaulting to 1000 [ 730.315565][ T2752] xfrm0 speed is unknown, defaulting to 1000 [ 730.716295][ T2777] netlink: 'syz.2.13809': attribute type 29 has an invalid length. [ 730.777456][ T2777] netlink: 'syz.2.13809': attribute type 29 has an invalid length. [ 731.236929][ T2785] netlink: 'syz.2.13812': attribute type 1 has an invalid length. [ 731.252221][ T2785] __nla_validate_parse: 2 callbacks suppressed [ 731.252243][ T2785] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13812'. [ 732.463698][ T2829] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13828'. [ 732.473025][ T2829] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13828'. [ 733.829897][ T2881] netlink: 116 bytes leftover after parsing attributes in process `syz.2.13842'. [ 733.862332][ T2883] netlink: 'syz.0.13843': attribute type 4 has an invalid length. [ 734.253694][ T2909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13853'. [ 734.316681][ T2915] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13854'. [ 734.678158][ T2936] syzkaller1: entered promiscuous mode [ 734.687696][ T2936] syzkaller1: entered allmulticast mode [ 734.937784][ T2949] netlink: 180 bytes leftover after parsing attributes in process `syz.2.13871'. [ 735.090577][ T2957] xt_hashlimit: size too large, truncated to 1048576 [ 736.425445][ T3023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13903'. [ 736.555256][ T3032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13907'. [ 737.004799][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 737.493165][ T3068] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 738.135339][ T3109] dvmrp8: left allmulticast mode [ 738.661517][ T3133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13953'. [ 738.841132][ T3139] virt_wifi0 speed is unknown, defaulting to 1000 [ 738.882823][ T3139] xfrm0 speed is unknown, defaulting to 1000 [ 738.923577][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 739.607932][ T3178] virt_wifi0 speed is unknown, defaulting to 1000 [ 739.916054][ T3178] xfrm0 speed is unknown, defaulting to 1000 [ 740.030032][ T3141] dvmrp0: entered allmulticast mode [ 740.495558][ T3212] syzkaller1: entered promiscuous mode [ 740.508978][ T3212] syzkaller1: entered allmulticast mode [ 740.961380][ T3242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13998'. [ 741.316391][ T3254] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14002'. [ 741.327870][ T3252] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 741.753976][ T3254] nbd7: detected capacity change from 0 to 1 [ 741.779928][ T50] block nbd7: Receive control failed (result -32) [ 741.809929][ T3100] Buffer I/O error on dev nbd7, logical block 0, async page read [ 741.818180][ T3100] Buffer I/O error on dev nbd7, logical block 0, async page read [ 741.826335][ T3100] Buffer I/O error on dev nbd7, logical block 0, async page read [ 741.843486][ T3100] Buffer I/O error on dev nbd7, logical block 0, async page read [ 741.861004][ T3100] Buffer I/O error on dev nbd7, logical block 0, async page read [ 741.870195][ T3100] ldm_validate_partition_table(): Disk read failed. [ 741.877280][ T3100] Buffer I/O error on dev nbd7, logical block 0, async page read [ 741.886199][ T3100] Buffer I/O error on dev nbd7, logical block 0, async page read [ 741.894367][ T3100] Buffer I/O error on dev nbd7, logical block 0, async page read [ 741.902539][ T3100] Buffer I/O error on dev nbd7, logical block 0, async page read [ 741.910561][ T3100] Dev nbd7: unable to read RDB block 0 [ 741.919874][ T3100] Buffer I/O error on dev nbd7, logical block 0, async page read [ 741.928039][ T3100] nbd7: unable to read partition table [ 741.958434][ T3100] nbd7: partition table beyond EOD, truncated [ 742.741827][ T3293] sctp: [Deprecated]: syz.2.14019 (pid 3293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.741827][ T3293] Use struct sctp_sack_info instead [ 743.372525][ T3321] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.14027'. [ 743.712372][ T3333] netlink: 'syz.2.14034': attribute type 1 has an invalid length. [ 743.749506][ T3333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.804028][ T3339] netlink: 566 bytes leftover after parsing attributes in process `syz.3.14037'. [ 743.957038][ T3345] netlink: 256 bytes leftover after parsing attributes in process `syz.2.14039'. [ 744.019785][ T3349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14042'. [ 744.155420][ T3356] tipc: Started in network mode [ 744.195155][ T3356] tipc: Node identity ac1414aa, cluster identity 4711 [ 744.220751][ T3356] tipc: Enabled bearer , priority 5 [ 744.289802][ T3365] netlink: 'syz.4.14045': attribute type 6 has an invalid length. [ 744.869879][ T3398] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14062'. [ 745.285023][ T3412] syzkaller1: entered promiscuous mode [ 745.290877][ T3412] syzkaller1: entered allmulticast mode [ 745.381502][ T832] tipc: Node number set to 2886997162 [ 746.152598][ T3437] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14079'. [ 746.266333][ T3441] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14079'. [ 746.292827][ T3441] nbd: device at index 64 is going down [ 746.585040][ T3100] udevd[3100]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 746.620003][ T3454] netlink: 'syz.4.14085': attribute type 4 has an invalid length. [ 746.700494][ T3454] netlink: 'syz.4.14085': attribute type 4 has an invalid length. [ 746.795435][ T3458] netlink: 'syz.2.14087': attribute type 1 has an invalid length. [ 746.865663][ T3458] bond3: entered promiscuous mode [ 746.871395][ T3458] 8021q: adding VLAN 0 to HW filter on device bond3 [ 746.957693][ T3460] 8021q: adding VLAN 0 to HW filter on device bond4 [ 746.969384][ T3460] bond3: (slave bond4): making interface the new active one [ 746.976996][ T3460] bond4: entered promiscuous mode [ 746.992433][ T3460] bond3: (slave bond4): Enslaving as an active interface with an up link [ 749.291190][ T3569] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.14131'. [ 749.836649][ T3591] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 749.978748][ T3603] netlink: 'syz.2.14148': attribute type 2 has an invalid length. [ 750.341998][ T3623] syzkaller1: entered promiscuous mode [ 750.374434][ T3623] syzkaller1: entered allmulticast mode [ 750.646991][ T3639] syzkaller1: entered promiscuous mode [ 750.659811][ T3639] syzkaller1: entered allmulticast mode [ 751.079613][ T3664] netlink: 'syz.1.14174': attribute type 4 has an invalid length. [ 751.490185][ T3682] syzkaller1: entered promiscuous mode [ 751.504216][ T3682] syzkaller1: entered allmulticast mode [ 751.808689][ T3694] IPVS: Scheduler module ip_vs_sip not found [ 752.005029][ T3708] vlan5: entered allmulticast mode [ 752.010221][ T3708] bridge_slave_0: entered allmulticast mode [ 752.040730][ T3708] bridge0: port 1(vlan5) entered blocking state [ 752.050523][ T3708] bridge0: port 1(vlan5) entered disabled state [ 752.072488][ T3708] vlan5: entered promiscuous mode [ 752.080612][ T3708] bridge_slave_0: entered promiscuous mode [ 752.090870][ T3709] batadv_slave_0: entered promiscuous mode [ 752.101378][ T3707] batadv_slave_0: left promiscuous mode [ 752.186326][ T3715] vlan2: entered promiscuous mode [ 752.204663][ T3715] dummy0: entered promiscuous mode [ 752.216004][ T3715] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 752.566623][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14208'. [ 752.595936][ T3736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14208'. [ 752.622579][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14208'. [ 752.656810][ T3736] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14208'. [ 752.796607][ T3749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14214'. [ 753.572894][ T3798] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14235'. [ 753.659523][ T3801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14236'. [ 753.688114][ T3802] netlink: 'syz.4.14237': attribute type 2 has an invalid length. [ 753.706683][ T3802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14237'. [ 754.003235][ T3822] macvlan0: entered promiscuous mode [ 754.167350][ T3829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14249'. [ 754.313061][ T3835] veth0: entered promiscuous mode [ 754.328365][ T3834] veth0: left promiscuous mode [ 754.841764][ T3854] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14262'. [ 754.862424][ T3854] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14262'. [ 755.464404][ T3879] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14273'. [ 755.731407][ T3892] netlink: 27 bytes leftover after parsing attributes in process `syz.2.14279'. [ 756.128525][ T3906] xt_hashlimit: size too large, truncated to 1048576 [ 756.432212][ T3923] netlink: 51 bytes leftover after parsing attributes in process `syz.0.14292'. [ 757.327450][ T3979] syz_tun: entered allmulticast mode [ 757.368736][ T3979] dvmrp8: entered allmulticast mode [ 757.402797][ T3976] syz_tun: left allmulticast mode [ 757.885709][ T4007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.211383][ T4023] xt_hashlimit: size too large, truncated to 1048576 [ 758.503753][ T4036] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14341'. [ 758.811459][ T4047] netlink: 'syz.1.14347': attribute type 34 has an invalid length. [ 758.822541][ T4049] sock: sock_set_timeout: `syz.4.14346' (pid 4049) tries to set negative timeout [ 758.929023][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.127958][ T4071] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14358'. [ 759.417111][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.671026][ T4093] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14368'. [ 759.946344][ T4099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.967247][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.994995][ T4099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.030439][ T4099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.061381][ T4098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.086059][ T4098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.294270][ T4114] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.14375'. [ 761.052753][ T4162] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 761.062496][ T4162] batman_adv: batadv0: Adding interface: wlan0 [ 761.069063][ T4162] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.095512][ T4162] batman_adv: batadv0: Interface activated: wlan0 [ 761.373240][ T4176] netlink: 'syz.3.14404': attribute type 1 has an invalid length. [ 761.384247][ T4176] netlink: 84 bytes leftover after parsing attributes in process `syz.3.14404'. [ 761.397947][ T4176] netlink: 1 bytes leftover after parsing attributes in process `syz.3.14404'. [ 761.408839][ T4176] netlink: 'syz.3.14404': attribute type 1 has an invalid length. [ 761.420191][ T4176] netlink: 634 bytes leftover after parsing attributes in process `syz.3.14404'. [ 761.639007][ T4188] netlink: 27 bytes leftover after parsing attributes in process `syz.3.14410'. [ 763.095941][ T832] net_ratelimit: 4 callbacks suppressed [ 763.096035][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.349092][ T4252] netlink: 'syz.1.14435': attribute type 22 has an invalid length. [ 763.375738][ T4252] bond0: option ad_select: invalid value (16) [ 763.696683][ T4266] netlink: 'syz.1.14439': attribute type 2 has an invalid length. [ 764.123875][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 764.269962][ T4279] virt_wifi0 speed is unknown, defaulting to 1000 [ 764.302227][ T4279] xfrm0 speed is unknown, defaulting to 1000 [ 764.618239][ T4295] netlink: 'syz.0.14449': attribute type 4 has an invalid length. [ 765.003839][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14453'. [ 765.165888][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.285686][ T4317] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 765.681749][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.724991][ T4325] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 765.898060][ T4325] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_0 [ 765.930544][ T4325] batman_adv: 60ªX¹¦À: Interface activated: batadv_slave_1 [ 765.980251][ T4325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 766.002861][ T4325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 766.024276][ T4325] veth0_vlan: left promiscuous mode [ 766.031101][ T4325] veth0_vlan: entered promiscuous mode [ 766.066724][ T4325] veth0_macvtap: left promiscuous mode [ 766.074550][ T4325] veth0_macvtap: entered promiscuous mode [ 766.092412][ T4325] 8021q: adding VLAN 0 to HW filter on device bond1 [ 766.115150][ T4325] 8021q: adding VLAN 0 to HW filter on device bond2 [ 766.147277][ T4325] 8021q: adding VLAN 0 to HW filter on device bond3 [ 766.205120][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.281342][ T4325] 8021q: adding VLAN 0 to HW filter on device eth0 [ 766.290453][ T4325] 8021q: adding VLAN 0 to HW filter on device eth1 [ 766.299599][ T4325] 8021q: adding VLAN 0 to HW filter on device eth2 [ 766.308492][ T4325] 8021q: adding VLAN 0 to HW filter on device eth3 [ 766.317090][ T4325] ip6gretap0: entered promiscuous mode [ 766.337534][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.401375][ T4325] erspan0: entered promiscuous mode [ 766.409066][ T4325] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check. [ 766.434124][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.441376][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.449660][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.460964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.486835][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.494200][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.547771][ T4341] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14461'. [ 766.571519][ T1182] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.580667][ T1182] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.636174][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.645380][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.698486][ T1182] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.782400][ T4344] macvtap0: entered promiscuous mode [ 766.798367][ T4344] team0: entered promiscuous mode [ 766.819545][ T4344] team_slave_0: entered promiscuous mode [ 766.849921][ T4344] team_slave_1: entered promiscuous mode [ 766.873717][ T4344] veth1_to_hsr: entered promiscuous mode [ 766.895574][ T4344] macvtap0: entered allmulticast mode [ 766.921443][ T4344] team0: entered allmulticast mode [ 766.935166][ T4344] team_slave_0: entered allmulticast mode [ 766.950936][ T4344] team_slave_1: entered allmulticast mode [ 766.957684][ T4344] veth1_to_hsr: entered allmulticast mode [ 766.969093][ T4344] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 766.990263][ T4347] macvtap1: entered promiscuous mode [ 766.996731][ T4347] macvtap1: entered allmulticast mode [ 767.075375][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 767.105688][ T1182] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.181764][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 767.210489][ T13] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 767.246811][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.430476][ T4369] bridge0: entered allmulticast mode [ 767.458437][ T4369] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 767.493509][ T4369] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 767.534300][ T4369] bridge0: port 3(netdevsim1) entered disabled state [ 767.614669][ T4369] bridge_slave_1: left allmulticast mode [ 767.635884][ T4369] bridge_slave_1: left promiscuous mode [ 767.649538][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.687349][ T4369] (: left allmulticast mode [ 767.693659][ T4369] (: left promiscuous mode [ 767.705947][ T4369] bridge0: port 1(() entered disabled state [ 767.731379][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.288221][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.471288][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14483'. [ 768.512234][ T4395] xfrm1: entered promiscuous mode [ 768.519540][ T4395] xfrm1: entered allmulticast mode [ 768.525888][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14483'. [ 768.847306][ T1182] wlan1: Trigger new scan to find an IBSS to join [ 768.970632][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14493'. [ 768.990426][ T4423] netlink: 'syz.3.14493': attribute type 1 has an invalid length. [ 769.008810][ T4423] netlink: 'syz.3.14493': attribute type 2 has an invalid length. [ 769.162515][ T4432] syzkaller1: entered promiscuous mode [ 769.168931][ T4432] syzkaller1: entered allmulticast mode [ 769.233951][ T4437] netlink: 'syz.0.14500': attribute type 1 has an invalid length. [ 769.271499][ T4437] 8021q: adding VLAN 0 to HW filter on device bond6 [ 769.325604][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.352059][ T4437] bond6: (slave gretap2): making interface the new active one [ 769.362207][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.376454][ T4437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.386790][ T4437] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 769.498748][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.631944][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14505'. [ 769.653987][ T4447] netlink: 'syz.1.14505': attribute type 9 has an invalid length. [ 769.769851][ T29] audit: type=1800 audit(1781553458.945:15): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14507" name="memory.events" dev="tmpfs" ino=14879 res=0 errno=0 [ 769.903986][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.364191][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.385693][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.534677][T18434] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.781923][ T4498] netlink: 'syz.2.14525': attribute type 1 has an invalid length. [ 770.858127][ T4498] 8021q: adding VLAN 0 to HW filter on device bond5 [ 770.919370][ T4502] bond5: (slave geneve2): making interface the new active one [ 770.927508][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 770.938886][ T4502] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 770.950216][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.165403][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 771.240878][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14535'. [ 771.323558][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 771.434331][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14538'. [ 771.544504][ T4527] hsr_slave_1 (unregistering): left promiscuous mode [ 771.885488][ T1561] wlan1: Trigger new scan to find an IBSS to join [ 772.050275][ T4548] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 772.102592][ T4558] netlink: 52 bytes leftover after parsing attributes in process `syz.2.14547'. [ 772.118200][ T4548] bond4: (slave lo): Enslaving as an active interface with an up link [ 772.532134][ T4576] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.14555'. [ 772.836012][ T4597] netlink: 'syz.1.14563': attribute type 13 has an invalid length. [ 773.185191][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14572'. [ 773.211530][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14572'. [ 773.268688][ T1561] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.268817][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14572'. [ 773.287216][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14572'. [ 773.307918][ T1561] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.334108][ T1561] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.354848][ T1561] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.483809][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 773.488063][ T1163] net_ratelimit: 9 callbacks suppressed [ 773.488123][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.506904][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.526694][ T29] audit: type=1800 audit(1781553462.705:16): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14578" name=20 dev="tmpfs" ino=14650 res=0 errno=0 [ 773.720622][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14582'. [ 773.745430][ T4636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14582'. [ 773.769165][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14582'. [ 773.779117][ T1561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.794135][ T4636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14582'. [ 774.147218][ T4654] netlink: 'syz.2.14591': attribute type 13 has an invalid length. [ 774.403904][ T832] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 774.524258][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.886223][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.923870][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.924459][ T1561] wlan1: Trigger new scan to find an IBSS to join [ 775.119437][ T4696] veth1_to_bond: entered promiscuous mode [ 775.136066][ T4696] veth1_to_bond: entered allmulticast mode [ 775.184875][ T4696] veth1_to_bond (unregistering): left promiscuous mode [ 775.204922][ T4696] veth1_to_bond (unregistering): left allmulticast mode [ 775.266516][ T4696] bond0: (slave bond_slave_1): Releasing backup interface [ 775.485577][ T832] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 775.564297][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.575216][ T4704] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.782620][ T4704] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.884393][ T1561] wlan1: Creating new IBSS network, BSSID 96:04:52:36:79:78 [ 775.975195][ T4727] netlink: 'syz.2.14616': attribute type 4 has an invalid length. [ 776.004005][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.015789][ T4704] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.223120][ T4704] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.439130][ T1182] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.489755][ T1182] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.519947][ T1182] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.562983][ T1158] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.604061][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.114190][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.610160][ T4799] __nla_validate_parse: 4 callbacks suppressed [ 777.610184][ T4799] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.14641'. [ 777.970743][ T4814] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 778.026230][ T4814] bond6 (unregistering): Released all slaves [ 778.605001][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 778.683710][ T832] net_ratelimit: 5 callbacks suppressed [ 778.683730][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.724497][ T4851] bond6: option ad_select: invalid value (34) [ 778.749571][ T4851] bond6 (unregistering): Released all slaves [ 779.094361][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14673'. [ 779.139757][ T4878] netlink: 'syz.2.14673': attribute type 30 has an invalid length. [ 779.151438][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14673'. [ 779.177070][ T4883] netlink: 'syz.2.14673': attribute type 30 has an invalid length. [ 779.243859][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 779.254021][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.364115][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.725274][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.849990][ T4910] ip6tnl0: Caught tx_queue_len zero misconfig [ 779.884929][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 780.473927][ T1561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.697176][ T4964] netlink: 27 bytes leftover after parsing attributes in process `syz.3.14703'. [ 780.750807][ T4966] netlink: del zone limit has 8 unknown bytes [ 780.766765][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.248120][ T4991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14710'. [ 781.594580][ T1543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.747230][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14717'. [ 781.840161][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.968606][ T5004] veth1_vlan (unregistering): left allmulticast mode [ 782.317525][ T5785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.384628][T20119] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 782.399692][ T5018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 782.409141][T20119] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 782.467832][ T5018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 782.478033][ T5018] bridge0: port 1(vlan5) entered blocking state [ 782.484546][ T5018] bridge0: port 1(vlan5) entered forwarding state [ 782.550236][ T5032] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 782.568688][ T5023] gtp0: entered promiscuous mode [ 782.602187][ T5023] gtp0: entered allmulticast mode [ 782.632005][ T833] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 782.644341][ T5023] team0: Device gtp0 is of different type [ 782.679388][ T1543] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 782.714988][ T1543] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 782.938838][ T832] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 783.055193][ T5054] bond5: entered promiscuous mode [ 783.060905][ T5054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 783.723793][ C1] net_ratelimit: 13 callbacks suppressed [ 783.723815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.852657][ T5091] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 783.864328][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.875383][ T5091] syzkaller1: Refused to change device type [ 783.884184][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.222425][ T5109] syzkaller1: entered promiscuous mode [ 784.228621][ T5109] syzkaller1: entered allmulticast mode [ 784.240266][ T5109] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 784.538368][ T5130] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.14769'. [ 784.572038][ T5130] netlink: Conntrack attr has 3 unknown bytes [ 784.892516][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14776'. [ 784.924353][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.985647][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.004055][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.315555][ T5158] virt_wifi0 speed is unknown, defaulting to 1000 [ 785.357637][ T5158] xfrm0 speed is unknown, defaulting to 1000 [ 785.520980][ T1158] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23 [ 785.527161][ T5176] gretap0: entered promiscuous mode [ 785.579038][ T5176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.591780][ T5176] bridge0: port 3(dummy0) entered blocking state [ 785.600403][ T5176] bridge0: port 3(dummy0) entered forwarding state [ 785.793724][ T5176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 785.814509][ T5176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 785.891157][ T5176] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 785.966211][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.975184][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.982592][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.076269][ T1158] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.134461][ T1182] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.163245][ T1158] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.191757][ T1158] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.311800][ T1158] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.727603][ T5215] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.14802'. [ 786.843541][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 787.003785][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 787.440288][ T5237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14808'. [ 787.833849][ T5251] netlink: 56 bytes leftover after parsing attributes in process `syz.2.14808'. [ 788.128147][ T5259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 788.139040][ T5259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 788.161541][ T5259] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 788.188499][ T5259] erspan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 788.214133][ T5259] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 788.241393][ T5259] erspan2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 788.262771][ T5259] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 788.273488][ T5259] 8021q: adding VLAN 0 to HW filter on device bond2 [ 788.298465][ T5259] netdevsim netdevsim2 eth0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 788.311683][ T5259] 8021q: adding VLAN 0 to HW filter on device eth0 [ 788.322367][ T5259] netdevsim netdevsim2 eth1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 788.336264][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 788.345887][ T5259] netdevsim netdevsim2 eth2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 788.357147][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 788.367684][ T5259] netdevsim netdevsim2 eth3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 788.378882][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 788.414305][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14815'. [ 788.429051][ T5274] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 788.434248][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14815'. [ 788.448467][ T833] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 788.460160][ T5270] netlink: 'syz.4.14815': attribute type 6 has an invalid length. [ 788.477078][ T5270] netlink: 'syz.4.14815': attribute type 5 has an invalid length. [ 788.560710][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14815'. [ 788.573781][ T833] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 788.597430][ T1541] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.619648][ T1541] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.629098][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14815'. [ 788.659882][ T1543] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 788.664421][ T5270] netlink: 'syz.4.14815': attribute type 6 has an invalid length. [ 788.693491][ T5270] netlink: 'syz.4.14815': attribute type 5 has an invalid length. [ 788.701568][ T1541] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 788.722680][ T1541] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 789.084122][ T833] net_ratelimit: 6 callbacks suppressed [ 789.084143][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.491556][ T5311] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 789.509785][ T5311] syzkaller1: Linktype set failed because interface is up [ 789.517841][ T833] syzkaller1: tun_net_xmit 90 [ 789.525085][ T1551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.684308][ T5316] syz_tun: entered allmulticast mode [ 789.788177][ T5316] syz_tun (unregistering): left allmulticast mode [ 790.126096][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.134320][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.646986][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.050150][ T5387] bridge0: port 2(syz_tun) entered blocking state [ 791.057467][ T5387] bridge0: port 2(syz_tun) entered disabled state [ 791.064767][ T5387] syz_tun: entered allmulticast mode [ 791.079202][ T5387] syz_tun: entered promiscuous mode [ 791.092346][ T5387] bridge0: port 2(syz_tun) entered blocking state [ 791.099328][ T5387] bridge0: port 2(syz_tun) entered forwarding state [ 791.164449][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.265871][ T5398] netlink: 'syz.4.14864': attribute type 13 has an invalid length. [ 791.672298][ T5413] netlink: 'syz.2.14871': attribute type 1 has an invalid length. [ 791.806924][ T1546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.204442][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.256221][ T5401] sch_tbf: burst 6 is lower than device gretap0 mtu (32783) ! [ 792.354851][ T5413] 8021q: adding VLAN 0 to HW filter on device bond6 [ 792.430664][ T5415] bond6: (slave geneve3): making interface the new active one [ 792.444164][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 792.488434][ T5415] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 792.953842][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.244034][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.335692][ T5465] 8021q: adding VLAN 0 to HW filter on device bond7 [ 793.355681][ T5465] bridge0: port 1(bond7) entered blocking state [ 793.370404][ T5465] bridge0: port 1(bond7) entered disabled state [ 793.377885][ T5465] bond7: entered allmulticast mode [ 793.390183][ T5465] bond7: entered promiscuous mode [ 793.407332][ T5465] bridge0: port 1(bond7) entered blocking state [ 793.413810][ T5465] bridge0: port 1(bond7) entered forwarding state [ 793.567526][ T1541] bridge0: port 1(bond7) entered disabled state [ 793.668797][ T5490] netlink: 'syz.2.14903': attribute type 7 has an invalid length. [ 793.692776][ T5490] netlink: 'syz.2.14903': attribute type 8 has an invalid length. [ 793.716422][ T5490] netlink: 'syz.2.14903': attribute type 8 has an invalid length. [ 793.744028][ T5490] netlink: 'syz.2.14903': attribute type 4 has an invalid length. [ 793.759511][ T5490] netlink: 'syz.2.14903': attribute type 7 has an invalid length. [ 793.777011][ T5490] netlink: 207236 bytes leftover after parsing attributes in process `syz.2.14903'. [ 793.942216][ T5502] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14909'. [ 793.963906][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 794.289076][ T832] net_ratelimit: 3 callbacks suppressed [ 794.289099][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.247079][ T1541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.324407][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.637289][ T5539] xt_hashlimit: size too large, truncated to 1048576 [ 795.883594][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 795.886646][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 795.892216][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 795.900168][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 795.914799][ T1551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.043709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.367718][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.384957][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.581140][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14939'. [ 796.610398][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14939'. [ 796.985077][ T5598] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.14950'. [ 797.404175][ T832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.506618][ T1551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.449353][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.778169][ T5689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14970'. [ 798.907161][ T5694] netlink: 'syz.4.14972': attribute type 1 has an invalid length. [ 798.966553][ T5694] bond6: entered promiscuous mode [ 798.972770][ T5694] bond6: entered allmulticast mode [ 798.980029][ T5694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 799.221389][ T5741] netlink: 'syz.3.14977': attribute type 18 has an invalid length. [ 799.249511][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14977'. [ 799.291844][ T5741] netlink: 'syz.3.14977': attribute type 18 has an invalid length. [ 799.320422][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14977'. [ 799.489978][ T833] net_ratelimit: 3 callbacks suppressed [ 799.489999][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.603543][ T5776] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 799.726792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.744471][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.762082][ T5779] netlink: 'syz.0.14986': attribute type 2 has an invalid length. [ 799.773621][ T5779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14986'. [ 799.959809][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14988'. [ 800.364295][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 800.526398][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.903900][ T1543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.188799][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.564578][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.648926][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.905143][ T5829] virt_wifi0 speed is unknown, defaulting to 1000 [ 801.945851][ T5829] xfrm0 speed is unknown, defaulting to 1000 [ 802.044410][ T1543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.608035][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.780714][ T5857] dvmrp0: left allmulticast mode [ 804.683767][ T833] net_ratelimit: 3 callbacks suppressed [ 804.683787][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.844049][ T734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.852572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.116022][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15031'. [ 805.143260][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15031'. [ 805.394081][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.726057][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.207980][ T5939] netlink: 'syz.2.15042': attribute type 2 has an invalid length. [ 806.219071][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15042'. [ 806.234449][ T5927] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 806.262502][ T5927] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 806.524021][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.697878][ T5960] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.15052'. [ 806.715485][ T5962] netlink: 112 bytes leftover after parsing attributes in process `syz.4.15053'. [ 806.764767][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.405034][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.443161][ T5994] netlink: 'syz.1.15068': attribute type 1 has an invalid length. [ 807.530570][ T5994] 8021q: adding VLAN 0 to HW filter on device bond6 [ 807.620894][ T5998] bond6: (slave geneve4): making interface the new active one [ 807.644593][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.661481][ T5998] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 807.804456][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.050880][ T1549] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 808.928282][ T6042] ip6tnl7: entered allmulticast mode [ 809.692398][ T29] audit: type=1800 audit(1781553498.865:17): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15093" name="r" dev="tmpfs" ino=14806 res=0 errno=0 [ 809.780075][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15096'. [ 809.887780][T20119] net_ratelimit: 2 callbacks suppressed [ 809.887802][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.910680][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.965057][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.976750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.868371][ T6104] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 810.924761][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.096298][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.964563][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.024446][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15133'. [ 812.088379][ T6148] bond7: entered promiscuous mode [ 812.094874][ T6148] 8021q: adding VLAN 0 to HW filter on device bond7 [ 812.223210][ T6152] bridge4: entered promiscuous mode [ 812.244302][ T6152] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 812.263836][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.004161][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.164227][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.175429][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 813.633608][ T6192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.804147][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 814.349480][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15156'. [ 814.400249][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15156'. [ 814.422093][ T6211] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.15157'. [ 814.443003][ T6210] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.15158'. [ 814.466228][ T6207] geneve5: entered promiscuous mode [ 814.485039][ T6207] geneve5: entered allmulticast mode [ 815.083541][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 815.091646][ C1] net_ratelimit: 141 callbacks suppressed [ 815.091726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.110274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.120564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.129432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.138505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.147157][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.156136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.164930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.174211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.182791][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.430931][ T6244] tunl0: Caught tx_queue_len zero misconfig [ 816.605360][ T6297] virt_wifi0 speed is unknown, defaulting to 1000 [ 816.629481][ T6297] xfrm0 speed is unknown, defaulting to 1000 [ 816.856318][ T6311] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.15199'. [ 817.295649][ T6327] xfrm0: Caught tx_queue_len zero misconfig [ 818.319798][ T6364] netlink: 'syz.1.15223': attribute type 13 has an invalid length. [ 818.604616][ T6364] netlink: 'syz.1.15223': attribute type 13 has an invalid length. [ 818.767171][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15228'. [ 818.801326][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15228'. [ 818.923609][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 819.071075][ T6382] Bluetooth: hci1: too big key_count value 29096 [ 820.444219][T20119] net_ratelimit: 225 callbacks suppressed [ 820.444242][T20119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.614960][ T5722] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 820.853889][ T5785] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 821.176869][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.438055][ T6468] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 821.510616][ T6468] bond7: (slave lo): Enslaving as an active interface with an up link [ 821.548434][ T6468] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 822.047126][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15276'. [ 822.109425][ T6499] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15276'. [ 822.324786][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.367101][ T6511] netlink: 'syz.0.15281': attribute type 2 has an invalid length. [ 822.571545][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807fa0e400: rx timeout, send abort [ 823.084768][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807fa0e400: abort rx timeout. Force session deactivation [ 823.482096][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.564156][ T6552] netlink: 'syz.1.15299': attribute type 7 has an invalid length. [ 823.603918][ T6552] netlink: 'syz.1.15299': attribute type 7 has an invalid length. [ 824.048347][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.540731][ T6585] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.15311'. [ 824.604549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.627849][ T734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.687261][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.497525][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15327'. [ 825.754078][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.864394][ T1553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.527445][ T6676] netlink: 'syz.1.15349': attribute type 3 has an invalid length. [ 827.723715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.736836][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.748003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.798851][ T6689] bridge0: port 3(dummy0) entered disabled state [ 827.807464][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.819755][ T6689] bridge0: entered allmulticast mode [ 827.840530][ T6689] dummy0: left allmulticast mode [ 827.864438][ T6689] dummy0: left promiscuous mode [ 827.884226][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 827.904861][ T6689] bridge0: port 3(dummy0) entered disabled state [ 827.925995][ T6689] bridge_slave_0: left allmulticast mode [ 827.945798][ T6689] bridge_slave_0: left promiscuous mode [ 827.964354][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.005014][ T6689] bond0: (slave bridge0): Releasing backup interface [ 828.026277][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.461386][ T6701] syzkaller1: entered promiscuous mode [ 828.477711][ T6701] syzkaller1: entered allmulticast mode [ 828.807318][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15364'. [ 828.835526][ T6713] atomic_op ffff888041720998 conn xmit_atomic 0000000000000000 [ 829.143990][ T734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.164233][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 829.400757][ T6650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 829.470506][ T6724] netlink: 244 bytes leftover after parsing attributes in process `syz.0.15366'. [ 830.296747][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.444308][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.512781][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15397'. [ 830.524631][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15397'. [ 830.539533][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15397'. [ 830.550539][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15397'. [ 830.751047][ T6803] netlink: 27 bytes leftover after parsing attributes in process `syz.4.15401'. [ 830.923725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.933762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.943683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.953208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.987785][ T6809] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 831.453859][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.478184][ T6830] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 831.724007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.184005][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15426'. [ 832.584532][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.714939][ T6876] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 833.870878][ T6916] sctp: [Deprecated]: syz.1.15437 (pid 6916) Use of int in maxseg socket option. [ 833.870878][ T6916] Use struct sctp_assoc_value instead [ 833.940842][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15438'. [ 834.061600][ T6926] netlink: 'syz.4.15441': attribute type 4 has an invalid length. [ 834.072388][ T6927] netlink: 68 bytes leftover after parsing attributes in process `syz.2.15439'. [ 834.096396][ T6919] bond5: entered promiscuous mode [ 834.110740][ T6919] 8021q: adding VLAN 0 to HW filter on device bond5 [ 834.217995][ T6924] 8021q: adding VLAN 0 to HW filter on device bond5 [ 834.234269][ T6924] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 834.259827][ T6924] bond5: (slave ip6gre1): Error -95 calling set_mac_address [ 835.050935][ T6958] netlink: 'syz.4.15452': attribute type 1 has an invalid length. [ 835.159015][ T6958] bond7: entered promiscuous mode [ 835.165247][ T6958] 8021q: adding VLAN 0 to HW filter on device bond7 [ 835.340133][ T6962] bond7: (slave veth7): making interface the new active one [ 835.352184][ T6962] veth7: entered promiscuous mode [ 835.359993][ T6962] bond7: (slave veth7): Enslaving as an active interface with an up link [ 835.380409][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15455'. [ 835.417966][ T6967] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.15454'. [ 835.827780][ T6979] netlink: 'syz.3.15461': attribute type 3 has an invalid length. [ 835.949289][ T6984] virt_wifi0 speed is unknown, defaulting to 1000 [ 835.974311][ T6984] xfrm0 speed is unknown, defaulting to 1000 [ 835.983894][ T47] net_ratelimit: 10 callbacks suppressed [ 835.983915][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.206282][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.949243][ T6987] netlink: 'syz.2.15462': attribute type 4 has an invalid length. [ 837.103564][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.243988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.254540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.265810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.119487][ T7043] __nla_validate_parse: 1 callbacks suppressed [ 838.119508][ T7043] netlink: 276 bytes leftover after parsing attributes in process `syz.1.15472'. [ 838.285392][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.557878][ T7056] netlink: 7 bytes leftover after parsing attributes in process `syz.3.15475'. [ 839.246707][ T7080] netlink: 88 bytes leftover after parsing attributes in process `syz.4.15479'. [ 839.408827][ T1549] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 839.466652][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.856107][ T7096] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 840.276959][ T7096] bond8 (unregistering): Released all slaves [ 840.363655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.374702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.709248][ T7118] netlink: 'syz.4.15491': attribute type 10 has an invalid length. [ 840.801949][ T7118] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.850522][ T7118] bond0: (slave team0): Enslaving as an active interface with an up link [ 841.324842][ T1158] net_ratelimit: 5 callbacks suppressed [ 841.324865][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.588452][ T7130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.599127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.744589][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.204432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.217719][ T7141] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15501'. [ 842.424246][ T7151] netlink: 'syz.1.15505': attribute type 1 has an invalid length. [ 842.493649][ T7151] bond8: entered promiscuous mode [ 842.501665][ T7151] 8021q: adding VLAN 0 to HW filter on device bond8 [ 842.654432][ T7151] 8021q: adding VLAN 0 to HW filter on device bond8 [ 842.676036][ T7151] bond8: (slave gre2): The slave device specified does not support setting the MAC address [ 842.698462][ T7151] bond8: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 842.757236][ T7151] bond8: (slave gre2): making interface the new active one [ 842.799600][ T7151] gre2: entered promiscuous mode [ 842.840761][ T7151] bond8: (slave gre2): Enslaving as an active interface with an up link [ 842.893639][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.223107][ T7168] netlink: 'syz.1.15511': attribute type 8 has an invalid length. [ 843.264100][ T7168] netlink: 'syz.1.15511': attribute type 9 has an invalid length. [ 843.483711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.492582][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.501773][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.013543][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 844.203477][ T7186] netlink: 7 bytes leftover after parsing attributes in process `syz.1.15520'. [ 844.523571][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 845.091666][ T7203] lo: Caught tx_queue_len zero misconfig [ 845.164272][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 846.499793][ T7251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15549'. [ 846.603707][ C1] net_ratelimit: 3 callbacks suppressed [ 846.603743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.617984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.626652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.636236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.644853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.653908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.086858][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.315889][ T7272] xt_hashlimit: size too large, truncated to 1048576 [ 847.357415][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.724568][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 847.922655][ T7288] GUP no longer grows the stack in syz.3.15565 (7288): 200000003000-20000000a000 (200000001000) [ 847.954767][ T7288] CPU: 0 UID: 0 PID: 7288 Comm: syz.3.15565 Not tainted syzkaller #0 PREEMPT(full) [ 847.954804][ T7288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 847.954828][ T7288] Call Trace: [ 847.954921][ T7288] [ 847.955008][ T7288] dump_stack_lvl+0xe8/0x150 [ 847.955152][ T7288] __get_user_pages+0x238c/0x2720 [ 847.955247][ T7288] ? down_read_killable+0x1bb/0x340 [ 847.955382][ T7288] __gup_longterm_locked+0xd52/0x15c0 [ 847.955416][ T7288] ? lock_acquire+0x106/0x350 [ 847.955494][ T7288] gup_fast_fallback+0x1d82/0x20d0 [ 847.955566][ T7288] ? __pfx_gup_fast_fallback+0x10/0x10 [ 847.955599][ T7288] ? is_valid_gup_args+0x11f/0x200 [ 847.955630][ T7288] ? get_user_pages_fast+0x4d/0xb0 [ 847.955661][ T7288] __iov_iter_get_pages_alloc+0x378/0xa40 [ 847.955766][ T7288] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 847.955819][ T7288] iov_iter_get_pages2+0x5e/0xa0 [ 847.955851][ T7288] __se_sys_vmsplice+0x7b5/0x1660 [ 847.955917][ T7288] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 847.955951][ T7288] ? __pfx_futex_wait+0x10/0x10 [ 847.956091][ T7288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.956168][ T7288] do_syscall_64+0x174/0x580 [ 847.956243][ T7288] ? trace_irq_disable+0x3b/0x140 [ 847.956290][ T7288] ? clear_bhb_loop+0x40/0x90 [ 847.956318][ T7288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.956339][ T7288] RIP: 0033:0x7f99ccf9ce59 [ 847.956388][ T7288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.956438][ T7288] RSP: 002b:00007f99cdec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 847.956487][ T7288] RAX: ffffffffffffffda RBX: 00007f99cd215fa0 RCX: 00007f99ccf9ce59 [ 847.956504][ T7288] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 847.956519][ T7288] RBP: 00007f99cd032d6f R08: 0000000000000000 R09: 0000000000000000 [ 847.956532][ T7288] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 847.956545][ T7288] R13: 00007f99cd216038 R14: 00007f99cd215fa0 R15: 00007fff1f8b1188 [ 847.956589][ T7288] [ 848.394514][ T7299] sock: sock_set_timeout: `syz.3.15569' (pid 7299) tries to set negative timeout [ 848.656455][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.736615][ T7305] sctp: [Deprecated]: syz.4.15572 (pid 7305) Use of int in max_burst socket option. [ 848.736615][ T7305] Use struct sctp_assoc_value instead [ 848.862594][ T7314] netlink: 'syz.3.15575': attribute type 4 has an invalid length. [ 848.884855][ T7314] netlink: 'syz.3.15575': attribute type 4 has an invalid length. [ 849.212577][ T7325] gretap1: entered promiscuous mode [ 850.233760][ T7347] netlink: 7 bytes leftover after parsing attributes in process `syz.4.15587'. [ 850.886189][ T7365] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.15594'. [ 850.925249][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 851.285937][ T7373] syzkaller0: entered promiscuous mode [ 851.305193][ T7373] syzkaller0: entered allmulticast mode [ 852.052556][ T1561] net_ratelimit: 6 callbacks suppressed [ 852.052580][ T1561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.132121][ T7320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 852.242528][ T7384] netlink: 'syz.2.15599': attribute type 10 has an invalid length. [ 852.272011][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.15599'. [ 852.856698][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.923769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.934903][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.945372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.955188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.963828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.215204][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.338729][ T7402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15604'. [ 854.445254][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 855.597827][ T1543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.532792][ T7384] bond0: (slave geneve1): Releasing backup interface [ 856.542562][ T7384] geneve1: left promiscuous mode [ 856.552439][ T7384] geneve1: entered promiscuous mode [ 856.562610][ T7384] team0: Port device geneve1 added [ 856.735531][ T7407] tipc: Failed to remove unknown binding: 66,1,1/20185096:2218118916/2218118918 [ 856.764780][ T7407] tipc: Failed to remove unknown binding: 66,1,1/20185096:2218118916/2218118918 [ 856.881953][ T7412] lo: Caught tx_queue_len zero misconfig [ 856.930821][ T7412] netlink: 'syz.4.15608': attribute type 1 has an invalid length. [ 856.942057][ T7412] netlink: 'syz.4.15608': attribute type 1 has an invalid length. [ 856.952189][ T7412] netlink: 264 bytes leftover after parsing attributes in process `syz.4.15608'. [ 856.971950][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15608'. [ 856.995062][ T7416] policy can only be matched on NF_INET_PRE_ROUTING [ 856.995087][ T7416] unable to load match [ 857.028441][ T7412] netlink: 'syz.4.15608': attribute type 1 has an invalid length. [ 857.039286][ T7412] netlink: 'syz.4.15608': attribute type 1 has an invalid length. [ 857.057386][ T7412] netlink: 264 bytes leftover after parsing attributes in process `syz.4.15608'. [ 857.083210][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15608'. [ 857.287867][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15615'. [ 857.524906][ T7436] netlink: 'syz.1.15619': attribute type 1 has an invalid length. [ 857.545164][ T7436] netlink: 'syz.1.15619': attribute type 4 has an invalid length. [ 857.561903][ T7436] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.15619'. [ 857.905007][ T47] net_ratelimit: 7 callbacks suppressed [ 857.905030][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.964380][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 858.149964][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15624'. [ 858.183620][ T7450] netlink: 'syz.4.15624': attribute type 11 has an invalid length. [ 858.324271][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15624'. [ 858.390869][ T7450] netlink: 'syz.4.15624': attribute type 11 has an invalid length. [ 859.053605][ T1561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.104346][ T7476] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.15633'. [ 859.243798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.377926][ T7478] netlink: 'syz.4.15634': attribute type 1 has an invalid length. [ 859.490076][ T7484] netlink: 'syz.2.15636': attribute type 1 has an invalid length. [ 859.532833][ T7484] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.15636'. [ 859.550390][ T7478] bond8: entered promiscuous mode [ 859.570007][ T7478] 8021q: adding VLAN 0 to HW filter on device bond8 [ 859.694544][ T7485] 8021q: adding VLAN 0 to HW filter on device bond8 [ 859.730673][ T7485] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 859.770920][ T7485] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 859.807086][ T7485] bond8: (slave vti0): making interface the new active one [ 859.823456][ T7485] vti0: entered promiscuous mode [ 859.841088][ T7485] bond8: (slave vti0): Enslaving as an active interface with an up link [ 860.044302][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.058625][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 860.211696][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 861.353873][ T1549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.363856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.373030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.587731][ T7540] syzkaller0: entered promiscuous mode [ 862.608808][ T7540] syzkaller0: entered allmulticast mode [ 863.604245][ T13] net_ratelimit: 4 callbacks suppressed [ 863.604269][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 863.724632][ T1158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.868707][ T1546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.494082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.503226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.512271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.520854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.011673][ T1546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.113799][ T1561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.285506][ T1543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.301184][ T7587] validate_nla: 1 callbacks suppressed [ 868.301280][ T7587] netlink: 'syz.1.15673': attribute type 1 has an invalid length. [ 868.347481][ T7587] bond9: entered promiscuous mode [ 868.358987][ T7587] 8021q: adding VLAN 0 to HW filter on device bond9 [ 868.431227][ T7587] 8021q: adding VLAN 0 to HW filter on device bond9 [ 868.442675][ T7587] bond9: (slave ipip1): The slave device specified does not support setting the MAC address [ 868.458965][ T7587] bond9: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 868.477472][ T7587] bond9: (slave ipip1): making interface the new active one [ 868.486491][ T7587] ipip1: entered promiscuous mode [ 868.497557][ T7587] bond9: (slave ipip1): Enslaving as an active interface with an up link [ 869.262758][ T7600] bridge0: port 2(syz_tun) entered disabled state [ 869.319956][ T7600] bridge0: port 1(vlan5) entered disabled state [ 870.432663][ T7600] batman_adv: batadv0: Interface deactivated: wlan0 [ 871.413567][ T1549] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 871.461405][ T7605] : entered promiscuous mode [ 871.577638][ T7616] lo: Caught tx_queue_len zero misconfig [ 871.642901][ T1158] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.671493][ T1158] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.686838][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15681'. [ 871.714854][ T1158] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.735202][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15681'. [ 871.753166][ T1158] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.428652][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15697'. [ 874.144194][ T7728] netlink: 'syz.4.15726': attribute type 8 has an invalid length. [ 874.152802][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15726'. [ 874.630082][ T7728] veth1_to_team: entered promiscuous mode [ 874.660831][ T7728] gretap0: entered promiscuous mode [ 874.705031][ T7728] veth1_to_team: left promiscuous mode [ 874.729474][ T7728] gretap0: left promiscuous mode [ 875.372933][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15738'. [ 876.221382][ T7787] netlink: 2736 bytes leftover after parsing attributes in process `syz.0.15745'. [ 876.829113][ T7803] bond0: (slave bond_slave_0): Releasing backup interface [ 876.870210][ T7803] net_ratelimit: 3 callbacks suppressed [ 876.870234][ T7803] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 877.510772][ T7822] netlink: 36764 bytes leftover after parsing attributes in process `syz.3.15761'. [ 877.526052][ T7823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15760'. [ 877.542664][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15761'. [ 878.055706][ T7833] netlink: 56 bytes leftover after parsing attributes in process `syz.2.15766'. [ 879.857324][ T7882] virt_wifi0 speed is unknown, defaulting to 1000 [ 879.869814][ T7882] xfrm0 speed is unknown, defaulting to 1000 [ 880.306911][ T7893] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 880.851927][ T7887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.018011][ T7904] virt_wifi0 speed is unknown, defaulting to 1000 [ 881.056161][ T7904] xfrm0 speed is unknown, defaulting to 1000 [ 883.105639][ T7946] veth0: entered promiscuous mode [ 883.136988][ T7946] bond0: entered promiscuous mode [ 883.160415][ T7945] bond0: left promiscuous mode [ 883.192799][ T7945] veth0: left promiscuous mode [ 883.451236][ T7951] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.15808'. [ 883.604371][ T7958] tipc: Failed to remove unknown binding: 66,1,1/1593835523:755956115/755956117 [ 884.175342][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15815'. [ 884.384456][ T7971] 8021q: adding VLAN 0 to HW filter on device bond10 [ 884.477668][ T7979] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 884.539148][ T7982] virt_wifi0 speed is unknown, defaulting to 1000 [ 884.560728][ T7982] xfrm0 speed is unknown, defaulting to 1000 [ 884.598440][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15821'. [ 884.656208][ T7991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15821'. [ 884.677287][ T7989] macvtap0: entered promiscuous mode [ 884.688780][ T7989] macvtap0: entered allmulticast mode [ 884.700482][ T7989] erspan0: entered allmulticast mode [ 884.709451][ T7994] netlink: 'syz.4.15823': attribute type 1 has an invalid length. [ 884.900119][ T7994] 8021q: adding VLAN 0 to HW filter on device bond9 [ 884.996809][ T7995] bond9: (slave gretap4): making interface the new active one [ 885.009143][ T7995] bond9: (slave gretap4): Enslaving as an active interface with an up link [ 885.262238][ T8002] virt_wifi0 speed is unknown, defaulting to 1000 [ 885.382024][ T8002] xfrm0 speed is unknown, defaulting to 1000 [ 885.484733][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 886.488115][ T8025] syzkaller1: entered promiscuous mode [ 886.503623][ T8025] syzkaller1: entered allmulticast mode [ 889.060589][ T8063] bridge7: entered promiscuous mode [ 889.075400][ T8063] bridge7: entered allmulticast mode [ 889.111470][ T8065] netlink: 'syz.3.15849': attribute type 20 has an invalid length. [ 889.171926][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.180676][ T8065] netlink: 'syz.3.15849': attribute type 20 has an invalid length. [ 889.193126][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.217340][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.243849][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.409839][ T8070] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15851'. [ 889.810122][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15857'. [ 890.730950][ T8102] virt_wifi0 speed is unknown, defaulting to 1000 [ 890.770527][ T8102] xfrm0 speed is unknown, defaulting to 1000 [ 890.797095][ T8105] netlink: 'syz.4.15866': attribute type 1 has an invalid length. [ 892.237443][ T8128] sctp: [Deprecated]: syz.0.15874 (pid 8128) Use of int in maxseg socket option. [ 892.237443][ T8128] Use struct sctp_assoc_value instead [ 892.594912][ T8133] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15875'. [ 892.652163][ T8131] vlan6: entered allmulticast mode [ 892.659125][ T8131] bond0: entered allmulticast mode [ 892.736723][ T8133] bond0 (unregistering): Released all slaves [ 893.724554][ T8151] netlink: 51 bytes leftover after parsing attributes in process `syz.4.15883'. [ 895.728634][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 895.738192][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 896.346595][ T8222] syzkaller1: entered promiscuous mode [ 896.369190][ T8222] syzkaller1: entered allmulticast mode [ 896.385912][ T8224] syzkaller1: entered promiscuous mode [ 896.407103][ T8224] syzkaller1: entered allmulticast mode [ 896.797721][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15915'. [ 896.854805][ T8242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15915'. [ 896.910349][ T8249] netlink: 'syz.2.15918': attribute type 1 has an invalid length. [ 897.038690][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15919'. [ 897.299917][ T8254] bond8: (slave bridge4): making interface the new active one [ 897.401495][ T8254] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 898.838507][ T8311] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.15934'. [ 899.500045][ T8333] virt_wifi0 speed is unknown, defaulting to 1000 [ 899.526155][ T8333] xfrm0 speed is unknown, defaulting to 1000 [ 900.190583][ T8356] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.15953'. [ 900.241189][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15955'. [ 900.257021][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15955'. [ 900.273880][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15955'. [ 900.288391][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15955'. [ 900.901811][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15966'. [ 900.934542][ T1559] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.961125][ T1559] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.973582][ T1559] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 900.994064][ T1559] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 901.745009][ T8401] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.760790][ T8401] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.920769][ T8401] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 901.935738][ T8401] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.096711][ T8401] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 902.113922][ T8401] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.311946][ T8401] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 902.333588][ T8401] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.940623][ T47] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 902.981295][ T47] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.098426][ T1559] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.125975][ T1559] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.215911][ T47] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.244321][ T47] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.434002][ T1546] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 903.476013][ T1546] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.265443][ T8478] __nla_validate_parse: 1 callbacks suppressed [ 904.265466][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15995'. [ 904.446846][ T8479] virt_wifi0 speed is unknown, defaulting to 1000 [ 904.487346][ T8479] xfrm0 speed is unknown, defaulting to 1000 [ 905.974584][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 908.145884][ T8549] netlink: 'syz.3.16013': attribute type 1 has an invalid length. [ 908.154330][ T8549] netlink: 'syz.3.16013': attribute type 4 has an invalid length. [ 908.162341][ T8549] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.16013'. [ 908.220800][ T8551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16012'. [ 909.285405][T20119] uyz0: Port: 1 Link DOWN [ 909.506512][ T1559] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.559777][ T1559] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.593089][ T1559] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.639077][ T1559] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.694939][ T1559] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.734319][ T1559] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.772181][ T1559] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 909.813612][ T1559] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.837743][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16022'. [ 909.970282][ T8581] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16023'. [ 910.616279][ T8592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16027'. [ 910.805076][ T8594] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 911.651145][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16035'. [ 912.611943][ T8641] virt_wifi0 speed is unknown, defaulting to 1000 [ 912.624261][ T8636] syzkaller1: entered promiscuous mode [ 912.640430][ T8636] syzkaller1: entered allmulticast mode [ 912.657240][ T8641] xfrm0 speed is unknown, defaulting to 1000 [ 912.965732][ T8653] netlink: 'syz.0.16050': attribute type 11 has an invalid length. [ 913.091071][ T8654] syzkaller0: entered promiscuous mode [ 913.100617][ T8654] syzkaller0: entered allmulticast mode [ 913.132844][ T8653] erspan0: left promiscuous mode [ 913.186537][ T8653] bridge0: port 2(syz_tun) entered blocking state [ 913.193351][ T8653] bridge0: port 2(syz_tun) entered forwarding state [ 913.214581][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.268696][ T8653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 913.280218][ T8653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.306135][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 913.316755][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 913.330587][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 913.340527][ T8653] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 913.349921][ T8653] batman_adv: batadv0: Interface activated: wlan0 [ 913.387891][ T8653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 913.440370][ T8653] 8021q: adding VLAN 0 to HW filter on device bond2 [ 913.459055][ T8653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 913.505088][ T8653] 8021q: adding VLAN 0 to HW filter on device bond4 [ 913.519112][ T8653] erspan0: entered promiscuous mode [ 913.526256][ T8653] 8021q: adding VLAN 0 to HW filter on device bond5 [ 913.540728][ T8653] 8021q: adding VLAN 0 to HW filter on device bond6 [ 913.550838][ T8653] A link change request failed with some changes committed already. Interface wpan0 may have been left with an inconsistent configuration, please check. [ 913.567156][ T8659] batman_adv: batadv0: Interface deactivated: wlan0 [ 913.606527][ T8659] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 917.729801][ T13] bridge0: port 1(vlan5) entered blocking state [ 917.736237][ T13] bridge0: port 1(vlan5) entered forwarding state [ 917.758897][ T1549] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.768671][ T1549] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.820041][ T5740] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 917.856048][ T8711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 917.876867][ T1549] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.905636][ T1549] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.974370][ T42] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 917.998101][ T1559] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 918.024615][ T8562] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 918.032556][ T1559] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 918.076724][ T8563] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 918.091858][ T8563] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 918.145661][ T1559] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 918.164642][ T1559] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 918.175135][T18429] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 918.994102][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16084'. [ 919.108502][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16085'. [ 919.137676][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16084'. [ 919.508288][ T8733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 919.745813][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16093'. [ 920.239015][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16096'. [ 920.730756][ T8801] netlink: 'syz.2.16102': attribute type 1 has an invalid length. [ 920.795956][ T8801] 8021q: adding VLAN 0 to HW filter on device bond9 [ 920.812687][ T8806] [ 920.815086][ T8806] ============================================ [ 920.821345][ T8806] WARNING: possible recursive locking detected [ 920.827761][ T8806] syzkaller #0 Not tainted [ 920.832247][ T8806] -------------------------------------------- [ 920.838602][ T8806] syz.2.16102/8806 is trying to acquire lock: [ 920.844861][ T8806] ffff88807e80ee18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: __ethtool_get_link_ksettings+0x109/0x250 [ 920.856389][ T8806] [ 920.856389][ T8806] but task is already holding lock: [ 920.863803][ T8806] ffff88807e80ee18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_open+0xeb/0x220 [ 920.873409][ T8806] and the lock comparison function returns 0: [ 920.879520][ T8806] [ 920.879520][ T8806] other info that might help us debug this: [ 920.887638][ T8806] Possible unsafe locking scenario: [ 920.887638][ T8806] [ 920.895194][ T8806] CPU0 [ 920.898559][ T8806] ---- [ 920.901870][ T8806] lock(&dev_instance_lock_key#3); [ 920.907193][ T8806] lock(&dev_instance_lock_key#3); [ 920.912452][ T8806] [ 920.912452][ T8806] *** DEADLOCK *** [ 920.912452][ T8806] [ 920.920632][ T8806] May be due to missing lock nesting notation [ 920.920632][ T8806] [ 920.929065][ T8806] 2 locks held by syz.2.16102/8806: [ 920.934301][ T8806] #0: ffffffff8fdc1540 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 920.943538][ T8806] #1: ffff88807e80ee18 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_open+0xeb/0x220 [ 920.953427][ T8806] [ 920.953427][ T8806] stack backtrace: [ 920.959369][ T8806] CPU: 1 UID: 0 PID: 8806 Comm: syz.2.16102 Not tainted syzkaller #0 PREEMPT(full) [ 920.959401][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 920.959415][ T8806] Call Trace: [ 920.959438][ T8806] [ 920.959449][ T8806] dump_stack_lvl+0xe8/0x150 [ 920.959511][ T8806] print_deadlock_bug+0x279/0x290 [ 920.959571][ T8806] __lock_acquire+0x24bf/0x2cd0 [ 920.959597][ T8806] ? __lock_acquire+0x683/0x2cd0 [ 920.959620][ T8806] ? do_set_master+0x563/0x720 [ 920.959642][ T8806] ? do_setlink+0xe7b/0x4670 [ 920.959663][ T8806] ? rtnl_newlink+0x15c2/0x1bd0 [ 920.959695][ T8806] ? rtnetlink_rcv_msg+0x802/0xc00 [ 920.959727][ T8806] ? netlink_rcv_skb+0x226/0x4a0 [ 920.959824][ T8806] ? netlink_unicast+0x7bb/0x940 [ 920.959856][ T8806] ? netlink_sendmsg+0x813/0xb40 [ 920.959879][ T8806] ? ____sys_sendmsg+0x9b9/0xa20 [ 920.959940][ T8806] ? ___sys_sendmsg+0x2a5/0x360 [ 920.959959][ T8806] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 920.959980][ T8806] ? do_syscall_64+0x174/0x580 [ 920.960006][ T8806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.960050][ T8806] ? __ethtool_get_link_ksettings+0x109/0x250 [ 920.960079][ T8806] lock_acquire+0x106/0x350 [ 920.960102][ T8806] ? __ethtool_get_link_ksettings+0x109/0x250 [ 920.960140][ T8806] __mutex_lock+0x19d/0x1590 [ 920.960165][ T8806] ? __ethtool_get_link_ksettings+0x109/0x250 [ 920.960194][ T8806] ? lockdep_hardirqs_on+0x7a/0x110 [ 920.960219][ T8806] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 920.960271][ T8806] ? __wake_up_common_lock+0x195/0x1f0 [ 920.960307][ T8806] ? __ethtool_get_link_ksettings+0x109/0x250 [ 920.960338][ T8806] ? __pfx___mutex_lock+0x10/0x10 [ 920.960368][ T8806] ? igmp_group_added+0x238/0x910 [ 920.960446][ T8806] ? igmpv3_del_delrec+0x204/0x710 [ 920.960471][ T8806] __ethtool_get_link_ksettings+0x109/0x250 [ 920.960503][ T8806] bond_netdev_event+0x643/0xf80 [ 920.960625][ T8806] ? __pfx_bond_netdev_event+0x10/0x10 [ 920.960664][ T8806] ? ipmr_device_event+0x1f6/0x220 [ 920.960731][ T8806] notifier_call_chain+0x1a5/0x3d0 [ 920.960781][ T8806] __dev_notify_flags+0x1aa/0x310 [ 920.960806][ T8806] ? __pfx___dev_notify_flags+0x10/0x10 [ 920.960826][ T8806] ? __dev_change_flags+0x5f1/0x820 [ 920.960850][ T8806] ? __pfx___dev_change_flags+0x10/0x10 [ 920.960871][ T8806] ? trace_contention_end+0x3d/0x140 [ 920.960903][ T8806] netif_change_flags+0xde/0x1b0 [ 920.960926][ T8806] dev_change_flags+0x128/0x260 [ 920.960961][ T8806] vlan_device_event+0x1b4e/0x1f00 [ 920.961042][ T8806] ? packet_notifier+0xf1b/0xf70 [ 920.961114][ T8806] ? br_device_event+0x282/0x9c0 [ 920.961168][ T8806] ? __pfx_phonet_device_notify+0x10/0x10 [ 920.961226][ T8806] ? __pfx_vlan_device_event+0x10/0x10 [ 920.961250][ T8806] ? bcm_notifier+0xa9/0x890 [ 920.961306][ T8806] ? raw_notifier+0x9d/0x7d0 [ 920.961363][ T8806] ? cgw_notifier+0x314/0x380 [ 920.961387][ T8806] notifier_call_chain+0x1a5/0x3d0 [ 920.961420][ T8806] netif_open+0x10f/0x190 [ 920.961476][ T8806] ? __pfx_netif_open+0x10/0x10 [ 920.961508][ T8806] ? timer_init_key+0x161/0x2c0 [ 920.961565][ T8806] dev_open+0x101/0x220 [ 920.961601][ T8806] bond_enslave+0xeb2/0x3b10 [ 920.961662][ T8806] ? netlink_broadcast_filtered+0xe27/0xea0 [ 920.961695][ T8806] ? __pfx_bond_enslave+0x10/0x10 [ 920.961741][ T8806] ? mutex_is_locked+0x17/0x50 [ 920.961769][ T8806] do_set_master+0x563/0x720 [ 920.961797][ T8806] do_setlink+0xe7b/0x4670 [ 920.961828][ T8806] ? __pfx_do_setlink+0x10/0x10 [ 920.961850][ T8806] ? __lock_acquire+0x683/0x2cd0 [ 920.961887][ T8806] ? __mutex_trylock_common+0x15f/0x270 [ 920.961918][ T8806] ? __pfx___mutex_trylock_common+0x10/0x10 [ 920.961947][ T8806] ? rcu_is_watching+0x15/0xb0 [ 920.961972][ T8806] ? trace_contention_end+0x3d/0x140 [ 920.962001][ T8806] ? __mutex_lock+0x30f/0x1590 [ 920.962034][ T8806] ? rtnl_newlink+0x8a3/0x1bd0 [ 920.962069][ T8806] ? __pfx___mutex_lock+0x10/0x10 [ 920.962101][ T8806] ? full_name_hash+0x92/0xe0 [ 920.962164][ T8806] rtnl_newlink+0x15c2/0x1bd0 [ 920.962206][ T8806] ? __pfx_rtnl_newlink+0x10/0x10 [ 920.962248][ T8806] ? ktime_get+0x45/0x220 [ 920.962278][ T8806] ? lock_acquire+0x106/0x350 [ 920.962304][ T8806] ? ktime_get+0x45/0x220 [ 920.962335][ T8806] ? ktime_get+0x45/0x220 [ 920.962364][ T8806] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 920.962396][ T8806] ? ktime_get+0x1f5/0x220 [ 920.962427][ T8806] ? lapic_next_event+0x11/0x20 [ 920.962457][ T8806] ? clockevents_program_event+0x491/0x630 [ 920.962496][ T8806] ? __hrtimer_rearm_deferred+0x99/0x440 [ 920.962524][ T8806] ? __pfx_clockevents_program_event+0x10/0x10 [ 920.962563][ T8806] ? __lock_acquire+0x683/0x2cd0 [ 920.962585][ T8806] ? lockdep_hardirqs_on+0x7a/0x110 [ 920.962609][ T8806] ? irqentry_exit+0x218/0x8e0 [ 920.962631][ T8806] ? trace_irq_disable+0x3b/0x140 [ 920.962680][ T8806] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 920.962713][ T8806] ? __pfx_rtnl_newlink+0x10/0x10 [ 920.962752][ T8806] ? __pfx_rtnl_newlink+0x10/0x10 [ 920.962782][ T8806] rtnetlink_rcv_msg+0x802/0xc00 [ 920.962815][ T8806] ? kasan_save_track+0x3e/0x80 [ 920.962864][ T8806] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 920.962898][ T8806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 920.962933][ T8806] ? __lock_acquire+0x683/0x2cd0 [ 920.962968][ T8806] netlink_rcv_skb+0x226/0x4a0 [ 920.962993][ T8806] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 920.963028][ T8806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.963059][ T8806] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.963081][ T8806] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.963108][ T8806] netlink_unicast+0x7bb/0x940 [ 920.963148][ T8806] netlink_sendmsg+0x813/0xb40 [ 920.963178][ T8806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.963204][ T8806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 920.963301][ T8806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.963340][ T8806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.963373][ T8806] ____sys_sendmsg+0x9b9/0xa20 [ 920.963395][ T8806] ? __might_fault+0xaf/0x130 [ 920.963436][ T8806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.963464][ T8806] ? import_iovec+0x73/0xa0 [ 920.963492][ T8806] ___sys_sendmsg+0x2a5/0x360 [ 920.963514][ T8806] ? __lock_acquire+0x683/0x2cd0 [ 920.963538][ T8806] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.963572][ T8806] ? futex_wake+0x4d7/0x5b0 [ 920.963618][ T8806] ? __fget_files+0x2a/0x420 [ 920.963651][ T8806] ? __fget_files+0x3a2/0x420 [ 920.963684][ T8806] __x64_sys_sendmsg+0x1bd/0x2a0 [ 920.963708][ T8806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.963736][ T8806] ? rcu_is_watching+0x15/0xb0 [ 920.963765][ T8806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.963786][ T8806] do_syscall_64+0x174/0x580 [ 920.963809][ T8806] ? trace_irq_disable+0x3b/0x140 [ 920.963840][ T8806] ? clear_bhb_loop+0x40/0x90 [ 920.963862][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.963883][ T8806] RIP: 0033:0x7f3c2f99ce59 [ 920.963904][ T8806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.963931][ T8806] RSP: 002b:00007f3c2dbd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.963954][ T8806] RAX: ffffffffffffffda RBX: 00007f3c2fc16090 RCX: 00007f3c2f99ce59 [ 920.963970][ T8806] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005 [ 920.963984][ T8806] RBP: 00007f3c2fa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 920.963996][ T8806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.964009][ T8806] R13: 00007f3c2fc16128 R14: 00007f3c2fc16090 R15: 00007fffb3636578 [ 920.964035][ T8806] [ 921.721011][ T8801] netlink: 'syz.2.16102': attribute type 10 has an invalid length. [ 921.729547][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16102'. [ 923.803744][ C0] ip6_tnl_xmit_ctl: 14 callbacks suppressed [ 923.803760][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 923.883687][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 929.643436][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!