last executing test programs: 4.453960981s ago: executing program 3 (id=11526): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$bt_hci(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) 4.124378729s ago: executing program 3 (id=11531): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r1, 0x801, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) 3.809948638s ago: executing program 1 (id=11532): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmmsg$unix(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) 3.777293555s ago: executing program 2 (id=11533): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000000000)="110000000000060000071a80010061cc", 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 3.707755659s ago: executing program 3 (id=11534): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, 0x0) sendto$inet6(r0, &(0x7f0000000080)="02043c0001000000010e0200c52cf7c20675e005b02f0800eb2b2ff0dadb897c6b112002faffffff3066090cb600c5471d130aaf14c85443b705ca7952ad91e59066321a54e7", 0x46, 0x40001, 0x0, 0x0) 3.307698297s ago: executing program 1 (id=11536): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={r3, 0x4}, &(0x7f0000000180)=0x8) 3.281674979s ago: executing program 3 (id=11537): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.057558286s ago: executing program 2 (id=11538): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) 2.781586312s ago: executing program 1 (id=11540): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) 2.724595795s ago: executing program 4 (id=11541): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0x5}, &(0x7f0000000180)=0x8) 2.591571771s ago: executing program 1 (id=11542): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb904d54fe74bf8e9f31558a1c60c12f", 0x10}], 0x1}}], 0x1, 0x20000000) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000002c0)='J', 0x1}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 2.510151493s ago: executing program 2 (id=11544): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008814) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40) 2.332803007s ago: executing program 4 (id=11545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf2500000000", @ANYRES32=r4, @ANYBLOB="00000000000000003000128008000100736974002400028006000f0002073f01af4552069b230000080014"], 0x50}}, 0x0) 2.310242934s ago: executing program 2 (id=11546): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) 2.287134802s ago: executing program 1 (id=11547): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f00000000c0)=@gcm_128={{0x304}, "cdbef90c18b633a0", "fa07b3a2d40586d364f360be6df53598", "7eb00b44", "e598980949a58c71"}, 0x28) 2.249371273s ago: executing program 3 (id=11548): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 2.225531863s ago: executing program 0 (id=11549): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x100000) 1.92458746s ago: executing program 0 (id=11550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032", 0x5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 1.906937474s ago: executing program 4 (id=11551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, &(0x7f0000002580)=""/4046, 0xfce, 0x12, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004a80)=[{&(0x7f0000004a40)="f44652e1da092db5d06587", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000004d00)="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", 0x2ad}], 0x1}}], 0x3, 0x80) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.901985032s ago: executing program 1 (id=11552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2], 0x4c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848", 0x14}], 0x1}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f7475"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) 1.488254727s ago: executing program 4 (id=11553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x8, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0x90, 0x2c, 0xf35, 0x70bd23, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2400}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x100, 0xd, 0xa, 0xffff, 0x7ff}}, @TCA_DEF_DATA={0x6, 0x3, '\xff\xff'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xff}}]}, 0x90}, 0x1, 0x0, 0x0, 0x440}, 0x0) 1.108308576s ago: executing program 0 (id=11554): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000000200)=0x89) 1.032943755s ago: executing program 4 (id=11555): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000001c0)={{0x0, 0x3, 0x1, 0x101, 0xe9, 0x9, 0x8, 0x0, 0x1, 0x9, 0x91, 0x10001, 0x1, 0xffffffffffffffc2, 0x9}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x1, 0x8, 0x1, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}], 0x0}, 0x94) write(r1, &(0x7f0000000040)="09000000010001", 0x7) 865.71821ms ago: executing program 0 (id=11556): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 762.181761ms ago: executing program 4 (id=11557): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) 561.183858ms ago: executing program 2 (id=11558): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r1, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x10000, 0x1}}, 0x20) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@canfd={0xd, {{0x1}, 0x24, 0x1, 0x0, 0x0, "2c63ecefc9e14a1ab3afcf882bcd49561375f47fd8dfda46652820f554caf364339a7057404d6a439711a0dbfe6b3a5835d94a5ec6d4fe10f0dcfa083202de47"}}}}, 0x0) 487.708463ms ago: executing program 0 (id=11559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 326.560255ms ago: executing program 3 (id=11560): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) 210.313672ms ago: executing program 0 (id=11561): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x9, 0x2, 0x91, @random="4c01f00a4bb3"}, 0x10) connect$llc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r1) 0s ago: executing program 2 (id=11562): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) kernel console output (not intermixed with test programs): 27] netlink: zone id is out of range [ 501.743884][T19435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6484'. [ 502.126666][T19444] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 502.126707][T19444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.350098][T19482] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.6508'. [ 503.350489][T19482] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 503.381320][T19482] 0ªX¹¦Dö»: entered allmulticast mode [ 503.519027][T19484] netlink: 'syz.0.6509': attribute type 4 has an invalid length. [ 503.519051][T19484] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6509'. [ 503.622270][T19491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.555726][T19525] nftables ruleset with unbound set [ 504.739279][T19529] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 504.739318][T19529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.006338][T19534] netlink: 'syz.3.6532': attribute type 1 has an invalid length. [ 505.110869][T19537] macvtap1: entered promiscuous mode [ 505.114728][T19537] macvtap1: entered allmulticast mode [ 505.114748][T19537] veth1_vlan: entered allmulticast mode [ 505.172818][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 505.216472][T19541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6536'. [ 506.013488][T19566] netlink: 'syz.0.6547': attribute type 1 has an invalid length. [ 507.427125][T19607] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6569'. [ 507.741366][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6574'. [ 508.465383][T19638] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6584'. [ 508.633954][T19642] wlan0 speed is unknown, defaulting to 1000 [ 510.662600][T19689] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6607'. [ 510.662663][T19689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6607'. [ 510.662678][T19689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6607'. [ 511.215810][T19706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.735327][T19722] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 512.846934][T19751] xt_hashlimit: size too large, truncated to 1048576 [ 515.459328][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6674'. [ 515.550109][T19843] netlink: 'syz.3.6676': attribute type 1 has an invalid length. [ 515.550135][T19843] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6676'. [ 515.550151][T19843] netlink: 'syz.3.6676': attribute type 1 has an invalid length. [ 515.632213][T19845] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 516.397137][T19868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6688'. [ 516.397163][T19868] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6688'. [ 519.047953][T19942] xt_IDLETIMER: label is empty or not nul-terminated [ 519.507720][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6732'. [ 519.646516][T19962] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 519.766229][T19965] netlink: 'syz.1.6735': attribute type 3 has an invalid length. [ 520.084595][T19975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.957592][T20001] netlink: 348 bytes leftover after parsing attributes in process `syz.0.6753'. [ 522.746161][T20056] Bluetooth: hci0: unsupported parameter 5135 [ 522.746187][T20056] Bluetooth: hci0: unsupported parameter 8192 [ 522.746201][T20056] Bluetooth: hci0: unsupported parameter 5135 [ 522.746214][T20056] Bluetooth: hci0: unsupported parameter 8192 [ 522.985322][T20062] bridge_slave_1: default FDB implementation only supports local addresses [ 523.843754][T20083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6791'. [ 523.958551][T20083] bond4: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 523.990731][T20083] bond4 (unregistering): Released all slaves [ 524.231608][T20091] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 524.973691][T20120] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 526.396108][T20172] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 527.452643][T20204] tun0: tun_chr_ioctl cmd 1074025675 [ 527.452668][T20204] tun0: persist enabled [ 527.728662][T20209] sctp: Trying to GSO but underlying device doesn't support it. [ 528.913671][T20244] IPv6: Can't replace route, no match found [ 528.915041][T20244] IPv6: Can't replace route, no match found [ 529.315442][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6869'. [ 529.794536][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6874'. [ 529.925033][T20271] openvswitch: netlink: EtherType 2 is less than min 600 [ 530.294236][T20279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6880'. [ 530.303110][T20269] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 530.412022][T20279] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 530.816664][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6884'. [ 531.512315][T20304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6891'. [ 531.982547][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6896'. [ 532.014713][T20316] netlink: 'syz.1.6896': attribute type 1 has an invalid length. [ 532.014739][T20316] netlink: 'syz.1.6896': attribute type 2 has an invalid length. [ 532.434452][T20329] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 532.434563][T20329] syzkaller1: linktype set to 823 [ 534.562313][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6933'. [ 535.494793][T20423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6945'. [ 535.751678][T20434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6947'. [ 535.996456][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6953'. [ 536.198295][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 536.711737][T20461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6963'. [ 537.490950][T20489] gretap0: entered promiscuous mode [ 537.509161][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6977'. [ 537.509190][T20489] gretap0: left promiscuous mode [ 538.455579][T20511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6986'. [ 539.267999][T20532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6995'. [ 539.458584][T20544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7001'. [ 541.271433][T20605] veth1_macvtap: left promiscuous mode [ 541.271465][T20605] macsec0: entered allmulticast mode [ 541.312564][T20605] veth1_macvtap: entered promiscuous mode [ 541.312589][T20605] veth1_macvtap: entered allmulticast mode [ 541.312687][T20605] macsec0: left allmulticast mode [ 541.312702][T20605] veth1_macvtap: left allmulticast mode [ 541.928195][T20623] nbd0: detected capacity change from 0 to 63 [ 541.957017][ T5622] block nbd0: Receive control failed (result -32) [ 542.018417][ T1956] block nbd0: Dead connection, failed to find a fallback [ 542.018445][ T1956] block nbd0: shutting down sockets [ 542.018514][ T1956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.018650][ T1956] Buffer I/O error on dev nbd0, logical block 0, async page read [ 542.029377][ T1956] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 542.029411][ T1956] Buffer I/O error on dev nbd0, logical block 1, async page read [ 542.029428][ T1956] Buffer I/O error on dev nbd0, logical block 2, async page read [ 542.029442][ T1956] Buffer I/O error on dev nbd0, logical block 3, async page read [ 542.036813][ T1956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 542.036847][ T1956] Buffer I/O error on dev nbd0, logical block 0, async page read [ 542.037017][ T1956] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 542.037042][ T1956] Buffer I/O error on dev nbd0, logical block 1, async page read [ 542.037057][ T1956] Buffer I/O error on dev nbd0, logical block 2, async page read [ 542.037071][ T1956] Buffer I/O error on dev nbd0, logical block 3, async page read [ 542.039751][ T1956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 542.039780][ T1956] Buffer I/O error on dev nbd0, logical block 0, async page read [ 542.039796][ T1956] Buffer I/O error on dev nbd0, logical block 1, async page read [ 542.039950][ T1956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 542.042316][ T1956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 542.043272][ T1956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 542.043471][ T1956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 542.043661][ T1956] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 542.043731][ T5629] ldm_validate_partition_table(): Disk read failed. [ 542.047044][ T5629] Dev nbd0: unable to read RDB block 0 [ 542.050300][ T5629] nbd0: unable to read partition table [ 542.099483][ T5629] ldm_validate_partition_table(): Disk read failed. [ 542.103143][ T5629] Dev nbd0: unable to read RDB block 0 [ 542.106472][ T5629] nbd0: unable to read partition table [ 542.444839][T20633] bond0: entered promiscuous mode [ 542.444861][T20633] bond_slave_0: entered promiscuous mode [ 542.445203][T20633] bond_slave_1: entered promiscuous mode [ 542.445439][T20633] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 542.487550][T20636] openvswitch: netlink: IP tunnel dst address not specified [ 542.487584][T20636] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 542.494324][T20633] batadv0: entered promiscuous mode [ 542.524845][T20633] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 543.360754][T20656] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7053'. [ 544.381361][T20693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7070'. [ 544.385357][T20693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7070'. [ 544.706898][T20700] tap0: tun_chr_ioctl cmd 2148553947 [ 544.743112][T20702] netlink: 'syz.1.7075': attribute type 83 has an invalid length. [ 545.680607][T20734] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7091'. [ 546.259986][T20758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7102'. [ 546.879416][T20777] ip6gre0: Master is either lo or non-ether device [ 547.913878][T20811] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7128'. [ 548.072035][T20814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7131'. [ 548.744418][T20831] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 549.187746][T20845] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 549.607383][T20857] netlink: 'syz.1.7148': attribute type 16 has an invalid length. [ 549.607412][T20857] netlink: 'syz.1.7148': attribute type 2 has an invalid length. [ 549.607425][T20857] netlink: 64110 bytes leftover after parsing attributes in process `syz.1.7148'. [ 549.677529][T20860] netlink: 'syz.4.7149': attribute type 33 has an invalid length. [ 549.775024][T20860] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 549.827291][T20860] bond1 (unregistering): Released all slaves [ 549.898061][T20866] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7153'. [ 549.926618][T20854] wlan0 speed is unknown, defaulting to 1000 [ 550.861902][T20889] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 551.292206][T20898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7166'. [ 551.464676][T20903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7170'. [ 552.131668][T20915] veth0: entered promiscuous mode [ 552.136879][T20915] veth0: left promiscuous mode [ 552.338877][T20107] Bluetooth: hci4: command 0x0406 tx timeout [ 552.390915][T20922] netlink: 'syz.4.7179': attribute type 83 has an invalid length. [ 552.730866][T20933] netlink: 'syz.3.7185': attribute type 83 has an invalid length. [ 553.043532][T20944] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7189'. [ 554.134154][T20980] xt_hashlimit: size too large, truncated to 1048576 [ 554.204058][T20981] xt_hashlimit: size too large, truncated to 1048576 [ 554.868628][T20992] batman_adv: batadv0: Adding interface: wlan1 [ 554.868649][T20992] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.904010][T20992] batman_adv: batadv0: Interface activated: wlan1 [ 555.111235][T20996] pimreg: entered allmulticast mode [ 556.517572][T21052] openvswitch: netlink: IP tunnel TTL not specified. [ 556.517611][T21052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.812017][T21060] netlink: 27 bytes leftover after parsing attributes in process `syz.1.7241'. [ 557.201554][T21074] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7247'. [ 557.500326][T21088] sctp: [Deprecated]: syz.0.7252 (pid 21088) Use of int in max_burst socket option. [ 557.500326][T21088] Use struct sctp_assoc_value instead [ 557.825171][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7257'. [ 557.826161][T21099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7257'. [ 558.895856][T21138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7277'. [ 559.068042][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7284'. [ 559.936754][T21180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7296'. [ 560.231682][T21192] sctp: [Deprecated]: syz.0.7301 (pid 21192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.231682][T21192] Use struct sctp_sack_info instead [ 560.346075][T21195] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7304'. [ 560.927940][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7314'. [ 560.927966][T21220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7314'. [ 561.508373][T21234] ipvlan0: entered allmulticast mode [ 561.518196][T21234] batman_adv: batadv0: Adding interface: ipvlan0 [ 561.518216][T21234] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.518249][T21234] batman_adv: batadv0: Interface activated: ipvlan0 [ 562.522866][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7335'. [ 562.987309][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.987589][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.294911][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7348'. [ 564.459943][T21328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7365'. [ 565.235632][T21355] openvswitch: netlink: Unknown key attributes 1 [ 565.503258][T21363] netlink: 'syz.3.7383': attribute type 5 has an invalid length. [ 565.837370][T21375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7388'. [ 565.897817][T21379] blkio.reset_stats is deprecated [ 566.174521][T21388] netlink: 'syz.0.7394': attribute type 1 has an invalid length. [ 566.174546][T21388] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7394'. [ 566.174563][T21388] netlink: 'syz.0.7394': attribute type 2 has an invalid length. [ 566.174577][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7394'. [ 567.010854][T21413] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7406'. [ 568.798987][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7436'. [ 568.802444][T21479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7436'. [ 569.071235][T21488] erspan0: entered promiscuous mode [ 569.332322][T21495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7443'. [ 569.334006][T21495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7443'. [ 569.514661][T21499] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7446'. [ 569.514684][T21499] tipc: Invalid UDP bearer configuration [ 569.514729][T21499] tipc: Enabling of bearer rejected, failed to enable media [ 569.693957][T21505] netlink: 31 bytes leftover after parsing attributes in process `syz.4.7449'. [ 569.693989][T21505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7449'. [ 569.694008][T21505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7449'. [ 570.206748][T21524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7457'. [ 570.939359][T21546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7468'. [ 571.365216][ T1005] tipc: Subscription rejected, illegal request [ 572.052200][T21586] netlink: 'syz.1.7487': attribute type 30 has an invalid length. [ 572.167547][T21580] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.435944][T21594] IPv6: NLM_F_CREATE should be specified when creating new route [ 573.127664][T21617] ip_tables: iptables: counters copy to user failed while replacing table [ 574.670198][T21652] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.955667][T21705] __nla_validate_parse: 5 callbacks suppressed [ 575.955693][T21705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7543'. [ 576.653451][T21721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7551'. [ 576.949535][T21732] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 577.838661][T21766] netlink: zone id is out of range [ 577.838682][T21766] netlink: zone id is out of range [ 577.839194][T21766] netlink: zone id is out of range [ 578.129141][T21773] vxcan0: tx address claim with dest, not broadcast [ 578.263517][T21776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7575'. [ 578.287656][T21777] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7576'. [ 578.630502][T21785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7580'. [ 578.769478][T21785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7580'. [ 579.271838][T21799] openvswitch: netlink: Unknown key attributes 1 [ 579.472643][T21807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7591'. [ 582.427780][T21894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7631'. [ 583.464421][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 585.001372][T21981] veth0: entered promiscuous mode [ 585.002371][T21977] veth0: left promiscuous mode [ 585.426214][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7679'. [ 586.191145][T22019] netlink: 'syz.4.7692': attribute type 21 has an invalid length. [ 586.191174][T22019] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7692'. [ 586.191259][T22019] netlink: 'syz.4.7692': attribute type 4 has an invalid length. [ 586.191273][T22019] netlink: 'syz.4.7692': attribute type 5 has an invalid length. [ 586.191286][T22019] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7692'. [ 586.192329][T22019] netlink: 'syz.4.7692': attribute type 21 has an invalid length. [ 586.192348][T22019] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7692'. [ 586.192393][T22019] netlink: 'syz.4.7692': attribute type 4 has an invalid length. [ 586.192406][T22019] netlink: 'syz.4.7692': attribute type 5 has an invalid length. [ 586.192418][T22019] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7692'. [ 586.746389][T22039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.786746][T22075] team0: No ports can be present during mode change [ 588.128619][T22085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7721'. [ 588.132414][T22083] netlink: 'syz.1.7723': attribute type 3 has an invalid length. [ 588.132433][T22083] netlink: 'syz.1.7723': attribute type 1 has an invalid length. [ 588.132445][T22083] netlink: 212 bytes leftover after parsing attributes in process `syz.1.7723'. [ 588.132460][T22083] NCSI netlink: No device for ifindex 813332851 [ 588.233242][T22087] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 588.759955][T20107] block nbd1: Receive control failed (result -32) [ 588.760289][ T5622] block nbd1: Receive control failed (result -32) [ 589.041667][T22113] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.873593][T22168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7762'. [ 590.873639][T22168] netlink: 'syz.1.7762': attribute type 1 has an invalid length. [ 591.207192][T22177] sctp: [Deprecated]: syz.0.7767 (pid 22177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 591.207192][T22177] Use struct sctp_sack_info instead [ 591.834458][T22197] veth0_to_bridge: entered promiscuous mode [ 591.835562][T22196] netlink: 'syz.2.7777': attribute type 14 has an invalid length. [ 591.907271][T22194] veth0_to_bridge: left promiscuous mode [ 592.788281][T22225] netlink: 'syz.0.7791': attribute type 2 has an invalid length. [ 594.436709][T22263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.741810][T22266] wlan0 speed is unknown, defaulting to 1000 [ 595.326831][T22284] netlink: 'syz.4.7818': attribute type 4 has an invalid length. [ 596.095536][T22297] IPVS: persistence engine module ip_vs_pe_À not found [ 597.223858][T22333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7839'. [ 597.223896][T22333] netlink: 'syz.0.7839': attribute type 30 has an invalid length. [ 597.223911][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7839'. [ 597.264077][T22335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7842'. [ 597.264180][T22335] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7842'. [ 597.371777][T22338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7843'. [ 597.441263][T22340] netlink: 'syz.1.7846': attribute type 1 has an invalid length. [ 597.441290][T22340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7846'. [ 597.750715][T22350] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7849'. [ 599.312622][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7870'. [ 600.626535][T22429] netlink: 232 bytes leftover after parsing attributes in process `syz.4.7887'. [ 600.887552][T22437] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7892'. [ 601.840085][T22459] wlan0 speed is unknown, defaulting to 1000 [ 602.695978][T22486] netlink: 'syz.4.7914': attribute type 1 has an invalid length. [ 602.696006][T22486] netlink: 'syz.4.7914': attribute type 7 has an invalid length. [ 602.696020][T22486] netlink: 'syz.4.7914': attribute type 8 has an invalid length. [ 602.696034][T22486] __nla_validate_parse: 2 callbacks suppressed [ 602.696046][T22486] netlink: 208 bytes leftover after parsing attributes in process `syz.4.7914'. [ 602.696063][T22486] NCSI netlink: No device for ifindex 65584 [ 603.271338][T22497] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 603.271552][T22497] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 603.494676][T22503] netlink: 'syz.0.7922': attribute type 15 has an invalid length. [ 604.728360][T22538] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7938'. [ 604.730277][T22538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7938'. [ 604.730300][T22538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7938'. [ 604.880439][T22547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7943'. [ 605.540376][T20107] Bluetooth: hci4: command 0x0406 tx timeout [ 605.619652][T22568] netlink: 168 bytes leftover after parsing attributes in process `syz.2.7950'. [ 606.134982][T22580] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7955'. [ 606.351500][T22583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7957'. [ 606.488231][T22589] veth0: entered promiscuous mode [ 606.526185][T22586] veth0: left promiscuous mode [ 607.179854][T22613] netlink: 'syz.1.7972': attribute type 83 has an invalid length. [ 607.976267][T22641] netlink: 'syz.1.7986': attribute type 1 has an invalid length. [ 607.976292][T22641] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7986'. [ 608.131505][T22643] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7987'. [ 608.869108][T22671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8000'. [ 610.316612][T22714] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8021'. [ 610.997315][T22738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8033'. [ 610.997349][T22738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8033'. [ 611.323117][T22748] netlink: 'syz.0.8037': attribute type 1 has an invalid length. [ 611.910937][T22769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8046'. [ 612.261930][T22782] ip_tables: iptables: counters copy to user failed while replacing table [ 612.395986][T22784] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8056'. [ 612.643923][T22790] openvswitch: netlink: IPv4 tunnel dst address is zero [ 612.643961][T22790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 613.117141][T22794] team0: Cannot enslave team device to itself [ 613.352337][T22803] netlink: 'syz.4.8064': attribute type 1 has an invalid length. [ 613.352366][T22803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8064'. [ 614.007742][T22823] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8071'. [ 615.459618][T19757] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 615.683222][T22874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8095'. [ 615.683447][T22874] netlink: 6 bytes leftover after parsing attributes in process `syz.2.8095'. [ 616.139560][T22889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8102'. [ 616.139587][T22889] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8102'. [ 616.139638][T22889] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8102'. [ 616.484465][T22901] netlink: 'syz.3.8107': attribute type 5 has an invalid length. [ 616.792094][T22914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8113'. [ 617.267569][T22928] netlink: 'syz.1.8120': attribute type 8 has an invalid length. [ 617.267593][T22928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8120'. [ 617.271436][T22928] bridge0: port 3(dummy0) entered disabled state [ 617.271678][T22928] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.271950][T22928] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.336188][T22932] netlink: 'syz.0.8121': attribute type 1 has an invalid length. [ 617.336213][T22932] netlink: 'syz.0.8121': attribute type 2 has an invalid length. [ 617.412602][T22935] netlink: 'syz.0.8121': attribute type 1 has an invalid length. [ 617.412628][T22935] netlink: 'syz.0.8121': attribute type 2 has an invalid length. [ 617.700979][T22944] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8126'. [ 619.513746][T23008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8155'. [ 619.631905][T23012] h: entered promiscuous mode [ 620.157403][T23035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8168'. [ 620.880393][T23054] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8177'. [ 620.931762][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8180'. [ 620.931796][T23058] block nbd2: Unsupported socket: should be TCP or UNIX. [ 621.022078][T23059] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8179'. [ 622.753424][T23120] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8210'. [ 623.237925][T23137] tipc: New replicast peer: 255.255.255.255 [ 623.254163][T23137] tipc: Enabled bearer , priority 10 [ 623.915851][T23164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8230'. [ 624.070031][T23172] sctp: [Deprecated]: syz.0.8233 (pid 23172) Use of int in max_burst socket option deprecated. [ 624.070031][T23172] Use struct sctp_assoc_value instead [ 624.371422][T23179] sch_fq: defrate 0 ignored. [ 624.427110][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.427363][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.707482][T20107] Bluetooth: hci4: connection err: -111 [ 624.796791][T23195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8243'. [ 625.064092][T23201] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 625.788133][T23229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8261'. [ 625.926549][T23236] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8262'. [ 625.940495][T23233] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8262'. [ 626.344237][T23248] netlink: 'syz.4.8268': attribute type 2 has an invalid length. [ 628.383868][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8298'. [ 631.083643][T23411] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8341'. [ 631.809199][T23430] ip_tables: iptables: counters copy to user failed while replacing table [ 631.895940][T23433] netlink: 'syz.0.8352': attribute type 12 has an invalid length. [ 631.895966][T23433] netlink: 'syz.0.8352': attribute type 29 has an invalid length. [ 631.895980][T23433] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8352'. [ 631.895998][T23433] netlink: 'syz.0.8352': attribute type 2 has an invalid length. [ 632.315778][T23443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8356'. [ 632.315811][T23443] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8356'. [ 632.714034][T23443] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8356'. [ 633.135535][T23468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8366'. [ 636.183003][T23562] netlink: 88 bytes leftover after parsing attributes in process `syz.2.8411'. [ 636.845190][T23591] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8425'. [ 637.234621][T23603] openvswitch: netlink: IP tunnel dst address not specified [ 637.234660][T23603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.430020][T23610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8434'. [ 638.780718][T23658] netlink: 'syz.2.8456': attribute type 21 has an invalid length. [ 638.780746][T23658] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8456'. [ 639.487534][T23689] veth0: mtu less than device minimum [ 639.712116][T23694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8472'. [ 639.805327][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8476'. [ 639.806336][T23700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8476'. [ 640.322091][T23715] netlink: 'syz.0.8483': attribute type 2 has an invalid length. [ 641.005525][T23733] netlink: 'syz.3.8492': attribute type 83 has an invalid length. [ 642.264435][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8515'. [ 642.279436][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8515'. [ 642.942678][T23795] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8519'. [ 643.963196][T20107] block nbd2: Receive control failed (result -32) [ 644.564894][T23852] block nbd3: Unsupported socket: should be TCP or UNIX. [ 644.929851][T23864] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8551'. [ 647.258779][T23934] netlink: 'syz.1.8583': attribute type 16 has an invalid length. [ 647.258814][T23934] netlink: 'syz.1.8583': attribute type 17 has an invalid length. [ 647.369043][T23937] netlink: 'syz.0.8584': attribute type 11 has an invalid length. [ 647.460031][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 647.768271][T20107] block nbd3: Receive control failed (result -32) [ 647.841130][T23934] bridge0: port 3(dummy0) entered blocking state [ 647.841332][T23934] bridge0: port 3(dummy0) entered forwarding state [ 647.887410][T23934] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.887564][T23934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.908129][T23934] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.908294][T23934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.955740][T23934] vlan0: left promiscuous mode [ 647.955768][T23934] veth0_vlan: left promiscuous mode [ 647.986931][T23934] veth0_macvtap: left allmulticast mode [ 648.000134][T23934] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 648.000536][T23934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.001617][T23934] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 648.076573][T23934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 648.143608][T23934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 648.162235][T23934] 8021q: adding VLAN 0 to HW filter on device bond3 [ 648.185173][T23934] macvtap1: left promiscuous mode [ 648.186974][T23934] macvtap1: left allmulticast mode [ 648.186991][T23934] veth1_vlan: left allmulticast mode [ 648.547961][T19753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.548327][T19753] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.577396][T19753] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 648.580211][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 648.613086][T19753] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 648.616128][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 648.798608][T23962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8592'. [ 648.949195][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 649.029441][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.473705][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 649.555289][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 649.987142][T23993] openvswitch: netlink: Unknown key attributes 1 [ 650.731627][T24013] netlink: 'syz.2.8616': attribute type 8 has an invalid length. [ 650.732931][T24013] sch_fq: defrate 0 ignored. [ 650.875458][T24023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 651.161795][T24032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8626'. [ 651.172865][T24029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8624'. [ 651.311709][T24035] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 651.428107][T24037] netlink: 81 bytes leftover after parsing attributes in process `syz.1.8629'. [ 651.594986][T24047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8633'. [ 652.271748][T24062] netlink: 'syz.2.8640': attribute type 3 has an invalid length. [ 652.916833][T24079] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8649'. [ 653.167701][T24083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8651'. [ 654.197861][T24115] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8665'. [ 654.198210][T24115] bridge0: port 3(dummy0) entered disabled state [ 654.198490][T24115] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.200894][T24115] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.209168][T24143] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8678'. [ 655.271978][T24146] macvtap0: entered allmulticast mode [ 655.272006][T24146] veth0_macvtap: entered allmulticast mode [ 656.635910][T24176] netlink: 576 bytes leftover after parsing attributes in process `syz.3.8693'. [ 656.636011][T24176] tipc: Resetting bearer [ 656.716423][T24176] tipc: Disabling bearer [ 657.266404][T24195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8702'. [ 657.353647][T24196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8703'. [ 659.416050][T24263] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 659.852440][T24278] netlink: 'syz.0.8739': attribute type 10 has an invalid length. [ 659.942743][T24278] team0: Port device dummy0 added [ 661.135005][T24319] netlink: 'syz.1.8758': attribute type 9 has an invalid length. [ 661.540087][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 661.540112][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.962415][T24349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8772'. [ 662.179511][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 662.519934][T24373] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8782'. [ 662.753094][T24378] block nbd0: NBD_DISCONNECT [ 662.753175][T24378] block nbd0: Send disconnect failed -32 [ 663.514845][T24408] TCP: TCP_TX_DELAY enabled [ 665.057733][T24467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8823'. [ 665.503008][T24476] netlink: 'syz.1.8828': attribute type 4 has an invalid length. [ 666.417799][T24503] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8840'. [ 667.083768][T24519] sctp: [Deprecated]: syz.0.8848 (pid 24519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 667.083768][T24519] Use struct sctp_sack_info instead [ 667.297358][T24527] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8852'. [ 669.404441][T24589] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8880'. [ 670.528217][ T30] audit: type=1804 audit(1789180942.847:3): pid=24623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8898" name="/newroot/1810/cgroup.controllers" dev="tmpfs" ino=9094 res=1 errno=0 [ 670.538722][ T30] audit: type=1800 audit(1789180942.857:4): pid=24623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8898" name="cgroup.controllers" dev="tmpfs" ino=9094 res=0 errno=0 [ 670.551591][T24626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8900'. [ 671.664379][T24662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8917'. [ 672.258103][T24684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8927'. [ 672.372868][T24685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8926'. [ 674.442401][T24750] netlink: 'syz.1.8956': attribute type 5 has an invalid length. [ 674.582872][T24755] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8958'. [ 674.928321][T24767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8962'. [ 674.941037][T24765] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8963'. [ 675.628536][T24781] bond3: entered promiscuous mode [ 677.536357][T24848] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 678.819155][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 679.352901][T24904] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.9027'. [ 679.467708][ T1005] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 680.749533][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 681.014603][T24956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9052'. [ 681.082907][T24957] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9053'. [ 681.446979][T24972] netlink: 'syz.1.9060': attribute type 10 has an invalid length. [ 681.486006][T24972] dummy0: left allmulticast mode [ 681.486058][T24972] dummy0: left promiscuous mode [ 681.486303][T24972] bridge0: port 3(dummy0) entered disabled state [ 681.919651][T24988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9065'. [ 682.357914][T25002] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 682.421722][T25005] netlink: 'syz.1.9075': attribute type 4 has an invalid length. [ 682.800548][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9078'. [ 682.854546][T25008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9076'. [ 683.587487][T25037] netlink: 165 bytes leftover after parsing attributes in process `syz.1.9090'. [ 683.742251][T20107] block nbd0: Receive control failed (result -32) [ 684.062338][T25054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9097'. [ 684.375135][T25065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9101'. [ 684.375167][T25065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9101'. [ 684.550696][T25067] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.9104'. [ 684.753010][T25077] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9106'. [ 685.146387][T25091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9116'. [ 685.725379][T25109] tap0: tun_chr_ioctl cmd 1074025676 [ 685.725411][T25109] tap0: owner set to 0 [ 685.863351][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.863626][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.440576][T25131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9134'. [ 686.839383][T25145] tun2: tun_chr_ioctl cmd 1074025675 [ 686.839410][T25145] tun2: persist disabled [ 688.586499][T25197] nftables ruleset with unbound chain [ 689.169776][T25207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.284665][T25207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.303754][T25207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 689.331852][T25207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 689.356570][T25207] erspan0: entered promiscuous mode [ 689.373099][T25207] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 689.407343][T25213] bond0: left allmulticast mode [ 689.407369][T25213] bond_slave_0: left allmulticast mode [ 689.407387][T25213] bond_slave_1: left allmulticast mode [ 689.545318][T25213] geneve2: left allmulticast mode [ 689.573059][T25213] bond3: left allmulticast mode [ 689.587925][T25213] ipvlan0: left allmulticast mode [ 689.587954][T25213] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 689.602742][T25222] netlink: 'syz.4.9176': attribute type 6 has an invalid length. [ 689.603951][T25213] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 689.605116][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.605228][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.662335][ T5731] wlan0 speed is unknown, defaulting to 1000 [ 689.664831][T19753] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 690.495079][T25247] netlink: 'syz.4.9189': attribute type 2 has an invalid length. [ 690.495105][T25247] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9189'. [ 691.198192][T25271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9197'. [ 691.665432][T25285] netlink: 'syz.3.9202': attribute type 83 has an invalid length. [ 692.237409][T25309] lo: Caught tx_queue_len zero misconfig [ 693.619196][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 694.245255][T25378] openvswitch: netlink: IP tunnel dst address not specified [ 694.245295][T25378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.565042][T25388] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9240'. [ 695.266444][T25409] batman_adv: batadv0: Adding interface: gretap3 [ 695.266466][T25409] batman_adv: batadv0: The MTU of interface gretap3 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.266496][T25409] batman_adv: batadv0: Interface activated: gretap3 [ 696.170718][T25440] ip_tables: iptables: counters copy to user failed while replacing table [ 696.171575][T25439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9263'. [ 697.957406][T25490] netlink: 'syz.2.9281': attribute type 17 has an invalid length. [ 697.957432][T25490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9281'. [ 697.957458][T25490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9281'. [ 698.946076][T25519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9291'. [ 699.633987][T25545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9304'. [ 699.637600][T20107] block nbd4: Receive control failed (result -107) [ 699.832667][T25548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9306'. [ 701.102741][T25595] netlink: 27 bytes leftover after parsing attributes in process `syz.3.9324'. [ 701.134704][T25593] bridge2: entered promiscuous mode [ 701.134729][T25593] bridge2: entered allmulticast mode [ 701.189848][T25593] team0: Port device bridge2 added [ 701.232122][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.232631][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.232665][T25596] bridge0: port 3(team0) entered blocking state [ 701.233327][T25596] bridge0: port 3(team0) entered disabled state [ 701.234149][T25596] team0: entered allmulticast mode [ 701.234169][T25596] team_slave_0: entered allmulticast mode [ 701.285234][T25596] team_slave_1: entered allmulticast mode [ 701.321167][T25596] team0: entered promiscuous mode [ 701.321193][T25596] team_slave_0: entered promiscuous mode [ 701.321472][T25596] team_slave_1: entered promiscuous mode [ 701.323184][T25596] bridge0: port 3(team0) entered blocking state [ 701.323304][T25596] bridge0: port 3(team0) entered forwarding state [ 701.859137][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 701.994374][T25614] syzkaller1: entered promiscuous mode [ 701.994401][T25614] syzkaller1: entered allmulticast mode [ 702.602098][T25639] syzkaller1: entered promiscuous mode [ 702.602305][T25639] syzkaller1: entered allmulticast mode [ 703.463807][T25662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.782750][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.853310][T25692] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9365'. [ 705.586717][T25701] wlan0 speed is unknown, defaulting to 1000 [ 706.339125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.599770][T25729] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9379'. [ 706.655167][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.655195][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.700069][T25732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9381'. [ 706.982746][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.983282][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 709.540421][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.530795][T25836] netlink: 4384 bytes leftover after parsing attributes in process `syz.3.9426'. [ 711.015798][T25845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9429'. [ 711.015839][T25845] netlink: 'syz.0.9429': attribute type 7 has an invalid length. [ 711.015854][T25845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9429'. [ 711.184215][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9434'. [ 711.185178][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9434'. [ 711.460687][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.463623][ T1005] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 711.665375][T25862] veth0_to_bond: Caught tx_queue_len zero misconfig [ 711.717498][T25863] ieee802154 phy0 wpan0: encryption failed: -22 [ 711.906335][T25867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9440'. [ 711.906369][T25867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9440'. [ 711.906598][T25867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9440'. [ 711.906616][T25867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9440'. [ 712.031453][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.739061][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 712.739901][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.490823][T25911] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9456'. [ 714.103352][T25935] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 714.882879][T25961] ip_tables: iptables: counters copy to user failed while replacing table [ 714.911929][T25951] syzkaller1: entered promiscuous mode [ 714.912158][T25951] syzkaller1: entered allmulticast mode [ 714.937264][T25962] netlink: 'syz.0.9480': attribute type 39 has an invalid length. [ 715.309430][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.565107][T26002] bridge0: port 3(team0) entered disabled state [ 716.658396][T26002] team0 (unregistering): left allmulticast mode [ 716.658424][T26002] team_slave_0: left allmulticast mode [ 716.659225][T26002] team_slave_1: left allmulticast mode [ 716.660696][T26002] team0 (unregistering): left promiscuous mode [ 716.660713][T26002] team_slave_0: left promiscuous mode [ 716.661705][T26002] team_slave_1: left promiscuous mode [ 716.671312][T26002] bridge0: port 3(team0) entered disabled state [ 716.907240][T26002] team0 (unregistering): Port device team_slave_0 removed [ 717.099601][T26002] team0 (unregistering): Port device team_slave_1 removed [ 717.219565][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 717.224618][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.308700][T26002] team0 (unregistering): Port device bridge2 removed [ 717.359462][T26014] syzkaller1: entered promiscuous mode [ 717.359490][T26014] syzkaller1: entered allmulticast mode [ 717.727944][T26032] netlink: 'syz.1.9510': attribute type 1 has an invalid length. [ 717.727971][T26032] __nla_validate_parse: 1 callbacks suppressed [ 717.727983][T26032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9510'. [ 717.858930][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 718.530643][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.597281][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9522'. [ 718.616707][T26058] netlink: 65011 bytes leftover after parsing attributes in process `syz.4.9522'. [ 719.609703][T26079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9531'. [ 719.777158][T26084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9535'. [ 720.056723][T26088] sctp: [Deprecated]: syz.4.9536 (pid 26088) Use of int in max_burst socket option. [ 720.056723][T26088] Use struct sctp_assoc_value instead [ 720.420660][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.540929][T26110] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9547'. [ 720.829653][T26119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9550'. [ 721.604222][T26142] tipc: Enabled bearer , priority 0 [ 722.177179][T26153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9566'. [ 722.207349][T26153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9566'. [ 722.690124][T26168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9573'. [ 722.981094][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.053195][T26184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9581'. [ 723.494441][T26198] bond0: Caught tx_queue_len zero misconfig [ 723.524447][T26200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 723.524468][T26200] IPv6: NLM_F_CREATE should be set when creating new route [ 723.524832][T26200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9586'. [ 723.620864][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.994565][T26213] team_slave_1: Caught tx_queue_len zero misconfig [ 724.443776][T26230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9600'. [ 724.463557][T26230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9600'. [ 725.036528][T26242] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9605'. [ 725.036553][T26242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9605'. [ 725.324640][T26249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.541244][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.583060][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9612'. [ 725.700409][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9618'. [ 726.054492][T26275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9621'. [ 726.498845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.660818][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.661137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.538771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.745973][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.746239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.356759][T26349] macvlan0: entered promiscuous mode [ 728.579234][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.765450][T19754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.765962][T19754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.769046][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.821198][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.821457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.618796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.859488][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.859749][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.385867][T26403] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9665'. [ 730.668796][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.780121][T26412] xt_hashlimit: size too large, truncated to 1048576 [ 731.022969][T26424] nbd: nbd1 already in use [ 731.028112][T26424] block nbd1: NBD_DISCONNECT [ 731.028141][T26424] block nbd1: Send disconnect failed -32 [ 731.028162][T26424] block nbd1: Send disconnect failed -32 [ 731.028181][T26424] block nbd1: shutting down sockets [ 732.114823][T26454] veth1_to_bond: entered allmulticast mode [ 732.121066][T26454] veth1_to_bond: entered promiscuous mode [ 732.121516][T26454] veth1_to_bond: left promiscuous mode [ 732.122935][T26454] veth1_to_bond: left allmulticast mode [ 732.845901][T26476] netlink: 'syz.3.9696': attribute type 1 has an invalid length. [ 732.845929][T26476] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9696'. [ 732.845947][T26476] netlink: 'syz.3.9696': attribute type 2 has an invalid length. [ 732.845960][T26476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9696'. [ 732.961547][T26481] tipc: Started in network mode [ 732.961582][T26481] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 733.264282][T26489] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9703'. [ 733.564538][T26499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9707'. [ 733.567662][T26499] erspan0: left promiscuous mode [ 733.577898][T26499] macvlan0: left promiscuous mode [ 733.672587][T26499] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9707'. [ 734.023153][ T5745] net_ratelimit: 11 callbacks suppressed [ 734.023247][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.023482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.094921][T26511] vcan0: tx address claim with dest, not broadcast [ 734.505384][T19755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.505863][T19755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.506612][T19755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.059747][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.060016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.945055][T26556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.023940][T26557] netlink: 'syz.1.9734': attribute type 4 has an invalid length. [ 736.100516][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.100799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.442313][T26567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9739'. [ 737.196816][T26592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9752'. [ 737.251415][T26593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9751'. [ 737.251456][T26593] netlink: 'syz.4.9751': attribute type 10 has an invalid length. [ 737.251474][T26593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9751'. [ 738.248072][T26621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9765'. [ 738.261961][T26621] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9765'. [ 738.656917][T20107] Bluetooth: hci3: ISO packet too small [ 739.074510][T26646] syzkaller1: entered promiscuous mode [ 739.074536][T26646] syzkaller1: entered allmulticast mode [ 739.219955][ T5745] net_ratelimit: 9 callbacks suppressed [ 739.219978][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.220228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.447611][T26663] netlink: 'syz.1.9782': attribute type 1 has an invalid length. [ 739.906707][T26676] bond0: invalid NS target ff00:: specified for addition [ 739.906741][T26676] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 740.179815][T26689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9793'. [ 740.269230][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.269619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.289122][T19754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.289701][T19754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.326038][T19754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.006790][T26695] wlan0 speed is unknown, defaulting to 1000 [ 741.146123][T26701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9799'. [ 741.338178][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.338439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.464847][T26713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9803'. [ 741.481505][T26712] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 741.756762][T20107] block nbd1: Receive control failed (result -107) [ 741.757919][T26717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.964261][T26746] netlink: 'syz.2.9819': attribute type 2 has an invalid length. [ 742.964294][T26746] netlink: 'syz.2.9819': attribute type 2 has an invalid length. [ 743.020110][T26747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9818'. [ 743.171109][T26749] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9820'. [ 743.471453][T19755] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 744.044994][T26763] erspan0: entered promiscuous mode [ 744.419878][ T5745] net_ratelimit: 8 callbacks suppressed [ 744.419902][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.420203][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.499121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.821661][T26789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.979695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.390643][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.459719][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.459986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.731031][T26809] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 745.731793][T26809] gretap1: entered promiscuous mode [ 745.732025][T26809] gretap1: entered allmulticast mode [ 745.885956][T26815] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9851'. [ 745.904654][T26815] netlink: 'syz.4.9851': attribute type 9 has an invalid length. [ 745.904681][T26815] netlink: 23 bytes leftover after parsing attributes in process `syz.4.9851'. [ 746.018873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.022421][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.290682][T26822] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 746.561453][T26828] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9856'. [ 746.975988][T26837] veth0: entered promiscuous mode [ 746.977189][T26834] veth0: left promiscuous mode [ 747.018425][T26842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9861'. [ 747.220346][T20107] Bluetooth: hci3: command 0x0406 tx timeout [ 747.303010][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.303287][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.478622][T26868] sctp: [Deprecated]: syz.4.9875 (pid 26868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 748.478622][T26868] Use struct sctp_sack_info instead [ 749.219863][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 749.346717][T26885] ±ÿª¨úrBº“€: renamed from lo (while UP) [ 749.630843][T26894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9886'. [ 749.777720][T26898] net_ratelimit: 11 callbacks suppressed [ 749.777744][T26898] openvswitch: netlink: Missing valid actions attribute. [ 749.859866][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.860127][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.927516][T26901] batadv0: Caught tx_queue_len zero misconfig [ 750.030571][T26904] syz_tun: entered allmulticast mode [ 750.178509][T26908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.178903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.419500][T19755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.542948][T26907] netlink: 'syz.3.9894': attribute type 2 has an invalid length. [ 750.909447][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.909710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.005874][T26923] ip_tables: iptables: counters copy to user failed while replacing table [ 751.552707][T26934] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.9905'. [ 751.552737][T26934] openvswitch: netlink: Message has 4 unknown bytes. [ 751.736890][T26939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9908'. [ 752.180769][T26957] bridge_slave_1: left allmulticast mode [ 752.180799][T26957] bridge_slave_1: left promiscuous mode [ 752.182965][T26957] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.266535][T26957] bridge_slave_0: left allmulticast mode [ 752.267002][T26957] bridge_slave_0: left promiscuous mode [ 752.279415][T26957] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.065013][T26985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9929'. [ 753.065040][T26985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9929'. [ 753.065285][T26985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9929'. [ 753.065302][T26985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9929'. [ 754.607523][T27029] wlan0 speed is unknown, defaulting to 1000 [ 754.721852][T27040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9952'. [ 754.721892][T27040] netlink: 'syz.3.9952': attribute type 7 has an invalid length. [ 754.721906][T27040] netlink: 'syz.3.9952': attribute type 8 has an invalid length. [ 754.721918][T27040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9952'. [ 755.029159][ C0] net_ratelimit: 10 callbacks suppressed [ 755.029199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.060404][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.060672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.105643][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.105911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.259996][T19754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.819961][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.085475][T27087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9971'. [ 757.085501][T27087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9971'. [ 757.142004][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.142309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.544855][T19754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.778470][T27130] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9991'. [ 759.420723][T27150] erspan0: entered promiscuous mode [ 759.540200][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9998'. [ 759.542482][T27137] syzkaller1: entered promiscuous mode [ 759.542503][T27137] syzkaller1: entered allmulticast mode [ 759.744135][T27161] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10003'. [ 760.267857][ T5745] net_ratelimit: 8 callbacks suppressed [ 760.267880][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.268154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.898794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.324269][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.324499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.923340][T27222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10028'. [ 761.940563][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.025902][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.048314][T27224] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10030'. [ 762.048365][T27224] netlink: 256 bytes leftover after parsing attributes in process `syz.4.10030'. [ 762.349585][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.349838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.416857][T27237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10035'. [ 762.428371][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a641400: rx timeout, send abort [ 762.431015][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a641400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 762.661993][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.128274][T27256] block nbd5: server does not support multiple connections per device. [ 763.129462][T27256] block nbd5: shutting down sockets [ 764.206576][T27295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10059'. [ 764.690134][T27314] netlink: 'syz.4.10066': attribute type 2 has an invalid length. [ 764.707907][T27314] netlink: 'syz.4.10066': attribute type 2 has an invalid length. [ 764.707940][T27314] netlink: 67 bytes leftover after parsing attributes in process `syz.4.10066'. [ 765.468753][ T5745] net_ratelimit: 8 callbacks suppressed [ 765.468777][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.469060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.499742][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.500006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.780124][T27382] geneve3: entered promiscuous mode [ 766.929924][ T43] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 54033 - 0 [ 766.929998][ T43] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 54033 - 0 [ 766.930073][ T43] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 54033 - 0 [ 766.930108][ T43] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 54033 - 0 [ 767.573930][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.574202][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.782699][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.783241][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.065447][T27419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10115'. [ 768.497493][T27434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10122'. [ 768.497528][T27434] block nbd5: Unsupported socket: should be TCP or UNIX. [ 768.580444][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.580706][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.188116][T27456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10130'. [ 769.235226][T27460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10134'. [ 769.545892][T27465] gre0: entered promiscuous mode [ 769.545917][T27465] gre0: entered allmulticast mode [ 770.330715][ T30] audit: type=1800 audit(1789181042.657:5): pid=27493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10146" name="memory.events" dev="tmpfs" ino=10151 res=0 errno=0 [ 770.375089][ T30] audit: type=1804 audit(1789181042.657:6): pid=27493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.10146" name="/newroot/2017/memory.events" dev="tmpfs" ino=10151 res=1 errno=0 [ 770.660801][ T5745] net_ratelimit: 2 callbacks suppressed [ 770.660822][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.661068][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.980215][T19754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.086635][T27508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10152'. [ 771.164099][T27516] netlink: 11 bytes leftover after parsing attributes in process `syz.4.10156'. [ 771.512600][T27524] netlink: Failed to add  helper -22 [ 771.512666][T27524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.699834][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.700082][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.796213][T27537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10167'. [ 772.661912][T27565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10177'. [ 772.740456][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.740723][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.777040][T27568] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 772.832921][T27570] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.10179'. [ 773.580021][T27594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10190'. [ 773.580068][T27594] netlink: 'syz.0.10190': attribute type 7 has an invalid length. [ 773.580083][T27594] netlink: 'syz.0.10190': attribute type 8 has an invalid length. [ 773.580095][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10190'. [ 773.737848][T27601] netlink: 'syz.0.10193': attribute type 10 has an invalid length. [ 773.799664][T27601] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 774.145694][T27611] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10197'. [ 774.145737][T27611] bond0: ARP target 8.4.0.0 is already present [ 774.145759][T27611] bond0: option arp_ip_target: invalid value (1032) [ 775.461274][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 775.780713][T27664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10223'. [ 776.087928][ T5745] net_ratelimit: 9 callbacks suppressed [ 776.087950][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.475874][T27682] bridge0: port 1(veth0) entered blocking state [ 776.476616][T27682] bridge0: port 1(veth0) entered disabled state [ 776.476801][T27682] veth0: entered allmulticast mode [ 776.507960][T27682] veth0: entered promiscuous mode [ 776.907635][T27687] syzkaller1: entered promiscuous mode [ 776.907660][T27687] syzkaller1: entered allmulticast mode [ 776.953152][T27696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.139673][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.265400][T27704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10240'. [ 777.814326][T27718] batadv_slave_0: entered promiscuous mode [ 777.820900][T27718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10247'. [ 777.941716][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.125418][T27728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10252'. [ 778.187680][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.930451][T27728] macvlan0: left promiscuous mode [ 779.012028][T27728] netlink: 'syz.4.10252': attribute type 1 has an invalid length. [ 779.012055][T27728] netlink: 'syz.4.10252': attribute type 2 has an invalid length. [ 779.076079][T27730] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10253'. [ 779.219790][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.245356][T27734] vcan0: tx address claim with dlc 0 [ 779.300793][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.636970][T27747] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.087423][T27764] ªªªªª»: renamed from dummy0 (while UP) [ 780.259359][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.943784][T27782] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.10275'. [ 780.982558][T27784] netlink: 'syz.2.10277': attribute type 5 has an invalid length. [ 780.982583][T27784] netlink: 'syz.2.10277': attribute type 9 has an invalid length. [ 780.982598][T27784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10277'. [ 781.254068][T27788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10279'. [ 781.300403][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.320829][T27795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10282'. [ 781.320866][T27795] netlink: 'syz.1.10282': attribute type 10 has an invalid length. [ 781.320884][T27795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10282'. [ 781.434797][T27796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10279'. [ 781.459680][T27796] nbd: nbd64 already in use [ 781.870925][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.986703][ T5629] udevd[5629]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 782.339380][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.918556][T27840] netlink: 'syz.3.10297': attribute type 1 has an invalid length. [ 782.918583][T27840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10297'. [ 783.068424][T27844] netlink: 'syz.4.10300': attribute type 1 has an invalid length. [ 783.068449][T27844] netlink: 16179 bytes leftover after parsing attributes in process `syz.4.10300'. [ 783.139778][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 783.141971][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.380393][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.477393][T27849] netlink: 'syz.2.10302': attribute type 5 has an invalid length. [ 783.477417][T27849] netlink: 'syz.2.10302': attribute type 9 has an invalid length. [ 783.477430][T27849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10302'. [ 784.424921][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.437559][T27881] netlink: 'syz.0.10313': attribute type 17 has an invalid length. [ 784.437582][T27881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10313'. [ 784.437609][T27881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10313'. [ 784.462731][T27881] gretap0: entered promiscuous mode [ 784.476129][T27881] gretap0: left promiscuous mode [ 784.523239][T27879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10312'. [ 785.069996][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.070516][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.289880][T27899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.391567][T27909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10324'. [ 785.391594][T27909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10324'. [ 785.459615][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.598579][T27913] ip_tables: iptables: counters copy to user failed while replacing table [ 785.711288][T27915] netlink: 'syz.0.10327': attribute type 1 has an invalid length. [ 785.860343][T27915] bond5: entered promiscuous mode [ 785.860889][T27915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 786.028547][T27917] bond5: (slave bridge5): making interface the new active one [ 786.028575][T27917] bridge5: entered promiscuous mode [ 786.055477][T27917] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 786.499725][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.961237][T27951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.987087][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.060207][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.101599][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.190525][T27955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10342'. [ 787.465413][T27962] netlink: 'syz.4.10345': attribute type 12 has an invalid length. [ 787.465437][T27962] netlink: 'syz.4.10345': attribute type 29 has an invalid length. [ 787.465451][T27962] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10345'. [ 787.465471][T27962] netlink: 'syz.4.10345': attribute type 3 has an invalid length. [ 787.465483][T27962] netlink: 'syz.4.10345': attribute type 2 has an invalid length. [ 787.465496][T27962] netlink: 35 bytes leftover after parsing attributes in process `syz.4.10345'. [ 787.539936][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.619779][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.021847][T27974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10351'. [ 788.021877][T27974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10351'. [ 788.270464][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 788.583485][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.681094][T27991] netlink: 'syz.3.10358': attribute type 7 has an invalid length. [ 788.681121][T27991] netlink: 'syz.3.10358': attribute type 8 has an invalid length. [ 788.754621][T27994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.900193][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.540880][ T30] audit: type=1800 audit(1789181061.867:7): pid=28018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10368" name=680B20 dev="tmpfs" ino=10599 res=0 errno=0 [ 789.551381][T28021] __nla_validate_parse: 3 callbacks suppressed [ 789.551402][T28021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10370'. [ 789.993176][T28035] tls_set_device_offload: netdev not found [ 790.273804][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10378'. [ 790.273833][T28042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10378'. [ 790.273858][T28042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10378'. [ 790.389143][ T43] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.389234][ T43] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.400327][T19755] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.413665][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10378'. [ 790.413690][T28042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10378'. [ 790.413713][T28042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10378'. [ 790.884880][T28056] netlink: 'syz.1.10384': attribute type 21 has an invalid length. [ 790.884908][T28056] netlink: 128 bytes leftover after parsing attributes in process `syz.1.10384'. [ 790.884968][T28056] netlink: 'syz.1.10384': attribute type 5 has an invalid length. [ 790.884983][T28056] netlink: 'syz.1.10384': attribute type 6 has an invalid length. [ 790.884996][T28056] netlink: 3 bytes leftover after parsing attributes in process `syz.1.10384'. [ 791.108061][T28060] netlink: 'syz.2.10386': attribute type 12 has an invalid length. [ 791.108086][T28060] netlink: 'syz.2.10386': attribute type 29 has an invalid length. [ 791.108100][T28060] netlink: 148 bytes leftover after parsing attributes in process `syz.2.10386'. [ 791.108118][T28060] netlink: 'syz.2.10386': attribute type 1 has an invalid length. [ 791.108132][T28060] netlink: 'syz.2.10386': attribute type 2 has an invalid length. [ 791.448065][T28072] netlink: 'syz.2.10392': attribute type 11 has an invalid length. [ 791.449588][T28072] netlink: 'syz.2.10392': attribute type 11 has an invalid length. [ 791.700128][ T5745] net_ratelimit: 6 callbacks suppressed [ 791.700149][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.915747][T28087] gretap0: entered promiscuous mode [ 792.744411][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.381758][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.782574][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.795597][T28148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.694073][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.830239][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.301962][T19766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.859646][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.947959][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.772577][T28163] bond0: entered promiscuous mode [ 796.772604][T28163] bond_slave_0: entered promiscuous mode [ 796.772803][T28163] bond_slave_1: entered promiscuous mode [ 796.774567][T28163] bond0: left promiscuous mode [ 796.774585][T28163] bond_slave_0: left promiscuous mode [ 796.774925][T28163] bond_slave_1: left promiscuous mode [ 796.899450][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.262202][T28179] IPVS: rr: UDP [::1]:8080 - no destination available [ 797.695807][T28188] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 797.939802][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.420089][T19753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.641747][T28217] netlink: 'syz.2.10448': attribute type 1 has an invalid length. [ 798.715520][T28217] 8021q: adding VLAN 0 to HW filter on device bond4 [ 798.855719][T28219] bond4: (slave geneve5): making interface the new active one [ 798.888503][T28219] bond4: (slave geneve5): Enslaving as an active interface with an up link [ 798.979742][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.139220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.155422][T28206] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 799.155566][T28206] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 799.767728][T28245] netlink: 'syz.2.10459': attribute type 22 has an invalid length. [ 799.767753][T28245] __nla_validate_parse: 10 callbacks suppressed [ 799.767765][T28245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10459'. [ 799.920480][T28245] netlink: 'syz.2.10459': attribute type 22 has an invalid length. [ 799.920508][T28245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10459'. [ 800.021802][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.274774][T28259] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10466'. [ 800.274811][T28259] netlink: 'syz.3.10466': attribute type 10 has an invalid length. [ 800.274837][T28259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10466'. [ 800.316551][T28259] geneve4: entered promiscuous mode [ 800.316579][T28259] geneve4: entered allmulticast mode [ 800.422290][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.423338][T19755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.491688][T28264] netlink: 'syz.4.10468': attribute type 2 has an invalid length. [ 800.495020][T28264] netlink: 'syz.4.10468': attribute type 2 has an invalid length. [ 800.495042][T28264] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.10468'. [ 800.507501][T28265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10467'. [ 801.374968][T28288] atomic_op ffff888057d4d9e0 conn xmit_atomic 0000000000000000 [ 801.962724][T28312] net_ratelimit: 3 callbacks suppressed [ 801.962748][T28312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.099686][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.203755][T28317] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10484'. [ 802.256605][T28322] netlink: 'syz.2.10486': attribute type 39 has an invalid length. [ 802.760425][T28333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10492'. [ 802.763977][T28333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10492'. [ 802.797355][T28333] netlink: 'syz.1.10492': attribute type 32 has an invalid length. [ 802.841520][T28334] netlink: 'syz.2.10491': attribute type 9 has an invalid length. [ 802.841545][T28334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10491'. [ 802.842285][T28334] netlink: 'syz.2.10491': attribute type 9 has an invalid length. [ 803.139321][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.180034][T28347] batadv_slave_0: entered promiscuous mode [ 803.180979][T28347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.628811][ T1005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.632851][T28347] batadv_slave_0 (unregistering): left promiscuous mode [ 803.632924][T28347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.064855][T28358] netlink: 'syz.0.10502': attribute type 1 has an invalid length. [ 804.182170][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.253918][T28358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 804.407441][T28366] bond6: (slave gretap2): making interface the new active one [ 804.427959][T28366] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 805.222161][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.621195][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.741701][T28409] netlink: 'syz.0.10521': attribute type 14 has an invalid length. [ 805.741725][T28409] __nla_validate_parse: 6 callbacks suppressed [ 805.741737][T28409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10521'. [ 805.753873][T28409] netlink: 'syz.0.10521': attribute type 14 has an invalid length. [ 805.753895][T28409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10521'. [ 806.190630][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.191213][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.259411][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.239851][T28379] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 807.299588][ T5711] net_ratelimit: 2 callbacks suppressed [ 807.299613][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.459546][T19766] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 807.667768][T28424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10527'. [ 807.698838][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.339775][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.341728][T28449] netlink: 'syz.3.10539': attribute type 11 has an invalid length. [ 808.384693][T28451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10538'. [ 808.741648][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.743062][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.743333][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.030745][T28471] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.382522][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.551539][T28485] netlink: 'syz.3.10555': attribute type 2 has an invalid length. [ 809.623950][T28489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10558'. [ 809.654402][T28489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10558'. [ 809.788858][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.977001][T28497] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 810.425117][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.534976][T28510] 8021q: adding VLAN 0 to HW filter on device bond5 [ 810.535801][T28510] bridge0: port 3(bond5) entered blocking state [ 810.547032][T28510] bridge0: port 3(bond5) entered disabled state [ 810.547213][T28510] bond5: entered allmulticast mode [ 810.584712][T28510] bond5: entered promiscuous mode [ 810.588769][T28510] bridge0: port 3(bond5) entered blocking state [ 810.588892][T28510] bridge0: port 3(bond5) entered forwarding state [ 810.603547][T19753] bridge0: port 3(bond5) entered disabled state [ 810.674893][T28522] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10572'. [ 810.685642][T28522] veth0_to_bond: entered allmulticast mode [ 810.828757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.461876][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.826215][T28545] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10583'. [ 812.499729][ T5711] net_ratelimit: 3 callbacks suppressed [ 812.499753][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.899231][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.959845][T19766] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 813.323148][T28582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 813.539257][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.642936][T28593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.859110][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 813.938807][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.282709][T28606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10607'. [ 814.579940][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.979131][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.620159][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.018748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.659894][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.700701][ T5745] net_ratelimit: 1 callbacks suppressed [ 817.700725][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.700824][ T1296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.739655][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.137964][T28663] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 819.792929][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.855209][T28739] syz_tun: entered promiscuous mode [ 820.582004][T28757] syzkaller1: entered promiscuous mode [ 820.582029][T28757] syzkaller1: entered allmulticast mode [ 820.793666][T28765] netlink: 27 bytes leftover after parsing attributes in process `syz.4.10674'. [ 820.834137][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.231819][T28774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.412504][T28780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10681'. [ 821.416058][T28780] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10681'. [ 821.860118][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.259797][T20107] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 822.270755][T28806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.843787][T28828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10703'. [ 822.899752][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.919239][T28831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10704'. [ 823.009643][T28828] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10703'. [ 823.010675][T28833] netlink: 512 bytes leftover after parsing attributes in process `syz.2.10705'. [ 823.298758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.359807][T28835] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10706'. [ 823.379022][T28835] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.380671][T28835] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.461074][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.487444][T28835] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10706'. [ 823.548416][T28845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10710'. [ 823.940587][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.338811][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.849415][T28874] netlink: 'syz.0.10721': attribute type 4 has an invalid length. [ 824.862830][T28874] netlink: 'syz.0.10721': attribute type 4 has an invalid length. [ 824.979684][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.151192][T28881] netlink: 'syz.2.10726': attribute type 1 has an invalid length. [ 825.152308][T28881] netlink: 'syz.2.10726': attribute type 1 has an invalid length. [ 825.379256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.490614][T28892] bond4: (slave C): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 825.522880][T28892] bond4: (slave C): Enslaving as an active interface with an up link [ 825.670661][T28892] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 825.921514][T28909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.020820][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.605020][T28965] __nla_validate_parse: 8 callbacks suppressed [ 827.605043][T28965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10756'. [ 827.817276][T28971] netlink: 'syz.4.10759': attribute type 1 has an invalid length. [ 827.877243][T28971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 827.957330][T28978] pim6reg1: entered promiscuous mode [ 827.957356][T28978] pim6reg1: entered allmulticast mode [ 828.102460][ T5711] net_ratelimit: 3 callbacks suppressed [ 828.102487][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.498984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.728438][T28999] netlink: 6 bytes leftover after parsing attributes in process `syz.1.10770'. [ 828.884414][T29003] ip_tables: iptables: counters copy to user failed while replacing table [ 829.139952][ T5711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.222192][T19754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.285464][T29009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10774'. [ 829.482125][T29013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10780'. [ 829.484382][T29016] bond0: invalid NS target :: specified for addition [ 829.486776][T29016] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 829.521799][ T1296] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 829.522031][ T1296] bond0: (slave veth0_to_bond): link status definitely down, disabling slave [ 829.538917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.633723][T29022] ip_tables: iptables: counters copy to user failed while replacing table [ 830.182093][ T5745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.372758][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10791'. [ 830.578762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.653096][T29054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.783118][T29061] syzkaller1: entered promiscuous mode [ 830.783328][T29061] syzkaller1: entered allmulticast mode [ 831.071399][T29068] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10800'. [ 831.189065][T29070] netlink: 'syz.3.10801': attribute type 20 has an invalid length. [ 831.189091][T29070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10801'. [ 832.141359][T29070] netlink: 'syz.3.10801': attribute type 20 has an invalid length. [ 832.141385][T29070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10801'. [ 832.505718][ T1005] nci: nci_ntf_packet: unknown ntf opcode 0xb1f [ 833.068297][T29121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10813'. [ 834.157566][T29149] netlink: 'syz.2.10822': attribute type 10 has an invalid length. [ 834.211930][T29154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10826'. [ 834.211962][T29154] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10826'. [ 834.608307][T29158] netlink: 'syz.0.10828': attribute type 16 has an invalid length. [ 834.608333][T29158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10828'. [ 834.826918][T29168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10830'. [ 834.953859][T29168] hsr_slave_1 (unregistering): left promiscuous mode [ 835.284124][T29174] wlan0 speed is unknown, defaulting to 1000 [ 835.350129][T29099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 838.231742][T29262] netlink: 'syz.0.10872': attribute type 1 has an invalid length. [ 838.324878][ T30] audit: type=1800 audit(1789181110.647:8): pid=29263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10871" name=0A dev="tmpfs" ino=11073 res=0 errno=0 [ 838.484747][T29270] netlink: 'syz.3.10875': attribute type 1 has an invalid length. [ 838.533755][T29270] 8021q: adding VLAN 0 to HW filter on device bond4 [ 838.642411][T29270] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 839.130912][T29285] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10880'. [ 839.470368][ T1296] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 841.883510][T29329] netlink: 27 bytes leftover after parsing attributes in process `syz.4.10899'. [ 842.346252][T29339] xt_hashlimit: size too large, truncated to 1048576 [ 842.456058][T29345] syzkaller1: entered promiscuous mode [ 842.456087][T29345] syzkaller1: entered allmulticast mode [ 842.829941][T29349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10908'. [ 842.932926][T29353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10910'. [ 842.932952][T29353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10910'. [ 843.041546][T29353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10910'. [ 843.041572][T29353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10910'. [ 843.240463][T29365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10913'. [ 843.618053][T29373] netlink: 'syz.4.10917': attribute type 1 has an invalid length. [ 843.650113][T29375] netlink: 33 bytes leftover after parsing attributes in process `syz.2.10918'. [ 843.650138][T29375] netlink: 140 bytes leftover after parsing attributes in process `syz.2.10918'. [ 843.829888][T29365] vcan0 (unregistering): left allmulticast mode [ 843.988319][T29373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 844.126230][T29376] bond2: (slave geneve2): making interface the new active one [ 844.183762][T29376] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 844.777640][T29397] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 844.777733][T29397] syzkaller1: Refused to change device type [ 845.511993][T29417] __nla_validate_parse: 1 callbacks suppressed [ 845.512018][T29417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10934'. [ 845.555124][T29417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10934'. [ 845.651025][T29421] syzkaller1: entered promiscuous mode [ 845.651051][T29421] syzkaller1: entered allmulticast mode [ 845.673024][T29421] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 845.673049][T29421] syzkaller1: Linktype set failed because interface is up [ 845.900404][T29428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10938'. [ 845.907519][T29428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10938'. [ 846.213717][T29432] netlink: 'syz.4.10940': attribute type 21 has an invalid length. [ 846.213744][T29432] netlink: 'syz.4.10940': attribute type 22 has an invalid length. [ 846.213811][T29432] netlink: 'syz.4.10940': attribute type 23 has an invalid length. [ 846.213826][T29432] netlink: 'syz.4.10940': attribute type 25 has an invalid length. [ 846.213839][T29432] netlink: 'syz.4.10940': attribute type 26 has an invalid length. [ 846.213853][T29432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10940'. [ 846.589926][T29446] xt_hashlimit: size too large, truncated to 1048576 [ 846.791336][T29447] syzkaller1: entered promiscuous mode [ 846.791361][T29447] syzkaller1: entered allmulticast mode [ 848.390451][T29491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10962'. [ 848.395255][T29491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10962'. [ 848.739789][T29501] net_ratelimit: 2 callbacks suppressed [ 848.739813][T29501] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 849.097195][T29510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10970'. [ 850.364149][T29536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10980'. [ 851.049688][T29555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10988'. [ 852.755785][T29613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11010'. [ 854.105699][T29660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11028'. [ 854.311512][T20107] block nbd6: Receive control failed (result -107) [ 854.632376][T29666] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 854.985674][T29674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11037'. [ 855.159775][T29676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11039'. [ 855.494667][T29685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11040'. [ 856.879033][T29726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11058'. [ 856.879289][T29726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11058'. [ 857.760652][T29748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11068'. [ 857.765515][T29745] gretap3: entered promiscuous mode [ 857.768057][T29745] batman_adv: batadv0: Adding interface: gretap3 [ 857.768075][T29745] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 857.768101][T29745] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 857.944916][T29754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11070'. [ 858.008293][ T30] audit: type=1800 audit(1789181130.327:9): pid=29750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11069" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=11356 res=0 errno=0 [ 859.607442][T29803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11092'. [ 859.664812][T29807] netlink: 'syz.0.11092': attribute type 16 has an invalid length. [ 859.718948][T29805] netdevsim netdevsim3 netdevsim2: IPsec offload requires 128 bit authentication [ 860.812168][T29836] netlink: 'syz.1.11106': attribute type 7 has an invalid length. [ 861.260987][T29836] netlink: 'syz.1.11106': attribute type 7 has an invalid length. [ 862.424466][T29874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11119'. [ 862.424506][T29874] netlink: 'syz.3.11119': attribute type 7 has an invalid length. [ 862.424521][T29874] netlink: 'syz.3.11119': attribute type 8 has an invalid length. [ 862.424534][T29874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11119'. [ 862.895046][T29888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11123'. [ 863.454380][T29899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11128'. [ 863.888313][T29916] netlink: 'syz.1.11136': attribute type 5 has an invalid length. [ 864.220470][T29925] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 864.544192][T29931] netlink: 'syz.2.11143': attribute type 1 has an invalid length. [ 864.747530][T29931] 8021q: adding VLAN 0 to HW filter on device bond6 [ 864.815510][T29944] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11145'. [ 865.488016][T29969] netlink: 'syz.1.11153': attribute type 1 has an invalid length. [ 865.755270][T29974] bond5: (slave gretap1): making interface the new active one [ 865.778171][T29974] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 867.469105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 867.469355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.130795][T29958] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 868.888237][T30034] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11180'. [ 870.027502][T30063] netlink: 'syz.3.11189': attribute type 1 has an invalid length. [ 870.027527][T30063] netlink: 'syz.3.11189': attribute type 4 has an invalid length. [ 870.027540][T30063] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11189'. [ 870.060748][T30063] netlink: 'syz.3.11189': attribute type 1 has an invalid length. [ 870.060771][T30063] netlink: 'syz.3.11189': attribute type 4 has an invalid length. [ 870.060785][T30063] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.11189'. [ 870.221709][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.286560][T30070] sock: sock_set_timeout: `syz.4.11193' (pid 30070) tries to set negative timeout [ 871.666035][T30109] Bluetooth: ISO socket layer initialized [ 872.102082][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 872.254239][T30120] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 872.508884][T30127] netlink: 'syz.1.11212': attribute type 2 has an invalid length. [ 872.617222][T30129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11214'. [ 872.986878][T30136] bridge0: port 3(vlan0) entered blocking state [ 872.988218][T30136] bridge0: port 3(vlan0) entered disabled state [ 872.988478][T30136] vlan0: entered allmulticast mode [ 872.988497][T30136] geneve0: entered allmulticast mode [ 872.996156][T30136] vlan0: entered promiscuous mode [ 872.996176][T30136] geneve0: entered promiscuous mode [ 873.737851][T30152] syzkaller1: entered promiscuous mode [ 873.737879][T30152] syzkaller1: entered allmulticast mode [ 873.825328][T30163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11226'. [ 874.076538][T30163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11226'. [ 874.885053][T30181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11232'. [ 874.988036][T30181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11232'. [ 875.362113][T30193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11235'. [ 875.382394][T30193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11235'. [ 875.686671][T30204] syzkaller1: entered promiscuous mode [ 875.687343][T30204] syzkaller1: entered allmulticast mode [ 877.697525][T30240] v: renamed from veth0_vlan [ 878.064172][T30256] netlink: 240 bytes leftover after parsing attributes in process `syz.0.11251'. [ 878.823926][T30273] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 879.095950][T30278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 879.485091][T30286] syzkaller1: entered promiscuous mode [ 879.485121][T30286] syzkaller1: entered allmulticast mode [ 879.561606][T30293] GUP no longer grows the stack in syz.0.11263 (30293): 200000003000-20000000a000 (200000001000) [ 879.561646][T30293] CPU: 0 UID: 0 PID: 30293 Comm: syz.0.11263 Not tainted syzkaller #0 PREEMPT(full) [ 879.561670][T30293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 879.561683][T30293] Call Trace: [ 879.561769][T30293] [ 879.561829][T30293] dump_stack_lvl+0xe8/0x150 [ 879.561966][T30293] __get_user_pages+0x23b6/0x2750 [ 879.562032][T30293] ? lock_acquire+0x115/0x350 [ 879.562139][T30293] ? __gup_longterm_locked+0xc3b/0x15c0 [ 879.562178][T30293] __gup_longterm_locked+0xd52/0x15c0 [ 879.562212][T30293] ? lock_acquire+0x115/0x350 [ 879.562256][T30293] gup_fast_fallback+0x1d92/0x20e0 [ 879.562325][T30293] ? __pfx_gup_fast_fallback+0x10/0x10 [ 879.562356][T30293] ? lock_acquire+0x115/0x350 [ 879.562375][T30293] ? is_valid_gup_args+0x11f/0x200 [ 879.562404][T30293] ? get_user_pages_fast+0x4d/0xb0 [ 879.562439][T30293] __iov_iter_get_pages_alloc+0x378/0xa40 [ 879.562564][T30293] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 879.562613][T30293] iov_iter_get_pages2+0x5e/0xa0 [ 879.562645][T30293] __se_sys_vmsplice+0x7b5/0x1660 [ 879.562702][T30293] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 879.562735][T30293] ? __pfx_futex_wait+0x10/0x10 [ 879.562880][T30293] do_syscall_64+0x166/0x520 [ 879.562978][T30293] ? trace_irq_disable+0x3b/0x140 [ 879.563013][T30293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.563067][T30293] ? clear_bhb_loop+0x70/0xc0 [ 879.563095][T30293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.563117][T30293] RIP: 0033:0x7faf37d9e159 [ 879.563161][T30293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.563181][T30293] RSP: 002b:00007faf38cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 879.563230][T30293] RAX: ffffffffffffffda RBX: 00007faf38025fa0 RCX: 00007faf37d9e159 [ 879.563245][T30293] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 879.563260][T30293] RBP: 00007faf37e3503b R08: 0000000000000000 R09: 0000000000000000 [ 879.563273][T30293] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 879.563287][T30293] R13: 00007faf38026038 R14: 00007faf38025fa0 R15: 00007ffc107aee18 [ 879.563326][T30293] [ 880.226389][T30301] syzkaller1: entered promiscuous mode [ 880.226415][T30301] syzkaller1: entered allmulticast mode [ 880.590757][T30309] batman_adv: batadv0: Adding interface: syzkaller0 [ 880.590916][T30309] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.591036][T30309] batman_adv: batadv0: Interface activated: syzkaller0 [ 880.689813][T30305] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 880.925990][T30305] batman_adv: batadv0: Removing interface: syzkaller0 [ 881.043942][T30257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 882.611978][T30364] syzkaller1: entered promiscuous mode [ 882.612014][T30364] syzkaller1: entered allmulticast mode [ 883.521566][T20107] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 883.809643][T30395] syzkaller1: entered promiscuous mode [ 883.809883][T30395] syzkaller1: entered allmulticast mode [ 884.875891][T30422] batman_adv: batadv0: Adding interface: syzkaller0 [ 884.875914][T30422] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.875947][T30422] batman_adv: batadv0: Interface activated: syzkaller0 [ 884.942910][T30418] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 885.173440][T30418] batman_adv: batadv0: Removing interface: syzkaller0 [ 885.481096][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11301'. [ 886.965152][T30465] syzkaller1: entered promiscuous mode [ 886.965180][T30465] syzkaller1: entered allmulticast mode [ 887.470814][T30484] trusted_key: syz.1.11316 sent an empty control message without MSG_MORE. [ 887.611163][T30485] ip_tables: iptables: counters copy to user failed while replacing table [ 887.778423][T30498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11319'. [ 887.867888][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11319'. [ 888.203430][T30505] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11321'. [ 888.471618][T30511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11324'. [ 890.467289][T30562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11339'. [ 890.467551][T30562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11339'. [ 890.721476][T30558] syzkaller1: entered promiscuous mode [ 890.721505][T30558] syzkaller1: entered allmulticast mode [ 891.060707][T30582] netlink: 'syz.0.11344': attribute type 1 has an invalid length. [ 891.275203][T30588] netlink: 'syz.1.11347': attribute type 1 has an invalid length. [ 891.275228][T30588] netlink: 'syz.1.11347': attribute type 4 has an invalid length. [ 891.275241][T30588] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11347'. [ 891.667480][T30584] bond7: (slave gretap5): making interface the new active one [ 891.697374][T30584] bond7: (slave gretap5): Enslaving as an active interface with an up link [ 891.858296][T30601] batman_adv: batadv0: Adding interface: syzkaller0 [ 891.858317][T30601] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.858351][T30601] batman_adv: batadv0: Interface activated: syzkaller0 [ 891.914047][T30599] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 892.130566][T30599] batman_adv: batadv0: Removing interface: syzkaller0 [ 892.271967][T30616] veth1_to_bond: entered allmulticast mode [ 892.351198][T30616] veth1_to_bond: left allmulticast mode [ 892.363177][T30620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11356'. [ 894.405190][T30675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11375'. [ 894.462624][T30677] tipc: Failed to remove unknown binding: 66,1,1/3735816755:2528650149/2528650151 [ 894.462855][T30677] tipc: Failed to remove unknown binding: 66,1,1/3735816755:2528650149/2528650151 [ 895.348228][T30701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11383'. [ 896.513438][T30739] ip_tables: iptables: counters copy to user failed while replacing table [ 896.942243][T30727] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 896.942295][T30727] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 896.942330][T30727] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 896.942393][T30727] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 896.942427][T30727] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 896.942461][T30727] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 896.942494][T30727] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 896.943796][T30727] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 896.943833][T30727] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 898.337085][T30778] syzkaller1: entered promiscuous mode [ 898.337112][T30778] syzkaller1: entered allmulticast mode [ 899.124511][T30805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11421'. [ 899.143429][T30805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11421'. [ 899.362427][T30811] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 900.481488][T30843] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 901.448487][T30875] netlink: 'syz.4.11448': attribute type 1 has an invalid length. [ 901.465437][T30876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11450'. [ 901.683605][T30875] 8021q: adding VLAN 0 to HW filter on device bond3 [ 901.915991][T30886] netlink: 'syz.1.11454': attribute type 1 has an invalid length. [ 901.987887][T30890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11455'. [ 902.044363][T30887] netlink: 'syz.4.11455': attribute type 8 has an invalid length. [ 902.592636][T30889] bond6: (slave bridge0): making interface the new active one [ 902.594573][T30889] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 903.464104][T19755] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 903.635843][T30932] veth0: entered promiscuous mode [ 903.744255][T30932] veth0: left promiscuous mode [ 903.838781][T30937] netlink: 18 bytes leftover after parsing attributes in process `syz.1.11468'. [ 904.424935][T30959] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.11473'. [ 905.441994][T30985] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11484'. [ 905.442280][T30985] bridge0: port 1(veth0) entered blocking state [ 905.442426][T30985] bridge0: port 1(veth0) entered forwarding state [ 905.537406][T30985] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11484'. [ 906.497295][T31009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11491'. [ 906.679747][T31015] net_ratelimit: 5158 callbacks suppressed [ 906.679771][T31015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.087417][T31020] netlink: 'syz.4.11494': attribute type 15 has an invalid length. [ 907.217074][T31020] netlink: 'syz.4.11494': attribute type 15 has an invalid length. [ 907.221417][ T1005] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 907.242328][ T1005] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 907.242655][ T1005] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 907.242694][ T1005] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 907.684962][T31041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11500'. [ 909.077579][T31081] ip_tables: iptables: counters copy to user failed while replacing table [ 909.207772][T31081] syzkaller1: entered promiscuous mode [ 909.208023][T31081] syzkaller1: entered allmulticast mode [ 911.054535][T31118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11524'. [ 911.054567][T31118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11524'. [ 912.042292][T31140] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11533'. [ 912.456010][T31158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11537'. [ 912.770144][T31158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11537'. [ 913.421234][T31179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11545'. [ 913.740598][T31195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11552'. [ 913.760311][T31195] syz_tun: entered promiscuous mode [ 914.798900][T31206] netlink: 'syz.0.11556': attribute type 4 has an invalid length. [ 915.454887][T31195] infiniband syz1: set active [ 915.454977][T31195] infiniband syz1: added syz_tun [ 915.489066][T31195] [ 915.491546][T31195] ====================================================== [ 915.498640][T31195] WARNING: possible circular locking dependency detected [ 915.505732][T31195] syzkaller #0 Not tainted [ 915.510174][T31195] ------------------------------------------------------ [ 915.517245][T31195] syz.1.11552/31195 is trying to acquire lock: [ 915.523721][T31195] ffffffff8ee900e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 915.532670][T31195] [ 915.532670][T31195] but task is already holding lock: [ 915.540523][T31195] ffffffff8ebf9080 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 915.549916][T31195] [ 915.549916][T31195] which lock already depends on the new lock. [ 915.549916][T31195] [ 915.560351][T31195] [ 915.560351][T31195] the existing dependency chain (in reverse order) is: [ 915.569390][T31195] [ 915.569390][T31195] -> #8 (wq_pool_mutex){+.+.}-{4:4}: [ 915.576970][T31195] __mutex_lock+0x19d/0x1550 [ 915.582167][T31195] __alloc_workqueue+0xa4f/0x1fe0 [ 915.587724][T31195] alloc_workqueue_noprof+0xe3/0x210 [ 915.593535][T31195] padata_alloc+0xbe/0x360 [ 915.598519][T31195] pcrypt_init_padata+0x27/0x100 [ 915.604060][T31195] pcrypt_init+0x60/0xc0 [ 915.608926][T31195] do_one_initcall+0x250/0x870 [ 915.614240][T31195] do_initcall_level+0x10a/0x1a0 [ 915.619713][T31195] do_initcalls+0x59/0xa0 [ 915.624568][T31195] kernel_init_freeable+0x29d/0x3e0 [ 915.630317][T31195] kernel_init+0x22/0x1d0 [ 915.635177][T31195] ret_from_fork+0x514/0xb70 [ 915.640312][T31195] ret_from_fork_asm+0x1a/0x30 [ 915.645608][T31195] [ 915.645608][T31195] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 915.653347][T31195] cpus_read_lock+0x42/0x160 [ 915.658467][T31195] static_key_slow_inc+0x12/0x30 [ 915.663924][T31195] setup_udp_tunnel_sock+0x2eb/0x4f0 [ 915.669858][T31195] gtp_encap_enable_socket+0x3d3/0x5c0 [ 915.675900][T31195] gtp_newlink+0x7df/0x16e0 [ 915.680921][T31195] rtnl_newlink_create+0x305/0x7b0 [ 915.686627][T31195] rtnl_newlink+0x166d/0x1c30 [ 915.691828][T31195] rtnetlink_rcv_msg+0x802/0xc00 [ 915.697297][T31195] netlink_rcv_skb+0x226/0x4a0 [ 915.702666][T31195] netlink_unicast+0x7bd/0x940 [ 915.707986][T31195] netlink_sendmsg+0x813/0xb40 [ 915.713281][T31195] sock_sendmsg_nosec+0x13a/0x180 [ 915.718911][T31195] ____sys_sendmsg+0x54e/0x850 [ 915.724199][T31195] ___sys_sendmsg+0x2a5/0x360 [ 915.729401][T31195] __x64_sys_sendmsg+0x1b1/0x290 [ 915.734863][T31195] do_syscall_64+0x166/0x520 [ 915.739988][T31195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.746402][T31195] [ 915.746402][T31195] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 915.754049][T31195] lock_sock_nested+0x41/0x100 [ 915.759333][T31195] inet_shutdown+0x6a/0x390 [ 915.764442][T31195] nbd_mark_nsock_dead+0x2cb/0x550 [ 915.770186][T31195] recv_work+0x1cee/0x1e10 [ 915.775123][T31195] process_scheduled_works+0xc3d/0x1630 [ 915.781189][T31195] worker_thread+0xa47/0xfb0 [ 915.786305][T31195] kthread+0x38b/0x480 [ 915.790906][T31195] ret_from_fork+0x514/0xb70 [ 915.796018][T31195] ret_from_fork_asm+0x1a/0x30 [ 915.801318][T31195] [ 915.801318][T31195] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 915.808985][T31195] __mutex_lock+0x19d/0x1550 [ 915.814101][T31195] nbd_queue_rq+0x373/0xff0 [ 915.819125][T31195] blk_mq_dispatch_rq_list+0x499/0x1990 [ 915.825276][T31195] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 915.832233][T31195] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 915.838827][T31195] blk_mq_run_work_fn+0x16c/0x300 [ 915.844394][T31195] process_scheduled_works+0xc3d/0x1630 [ 915.850460][T31195] worker_thread+0xa47/0xfb0 [ 915.855571][T31195] kthread+0x38b/0x480 [ 915.860164][T31195] ret_from_fork+0x514/0xb70 [ 915.865295][T31195] ret_from_fork_asm+0x1a/0x30 [ 915.870588][T31195] [ 915.870588][T31195] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 915.877817][T31195] __mutex_lock+0x19d/0x1550 [ 915.882934][T31195] nbd_queue_rq+0xc1/0xff0 [ 915.887892][T31195] blk_mq_dispatch_rq_list+0x499/0x1990 [ 915.894064][T31195] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 915.900921][T31195] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 915.907424][T31195] blk_mq_run_work_fn+0x16c/0x300 [ 915.912973][T31195] process_scheduled_works+0xc3d/0x1630 [ 915.919047][T31195] worker_thread+0xa47/0xfb0 [ 915.924162][T31195] kthread+0x38b/0x480 [ 915.928748][T31195] ret_from_fork+0x514/0xb70 [ 915.933860][T31195] ret_from_fork_asm+0x1a/0x30 [ 915.939162][T31195] [ 915.939162][T31195] -> #3 (set->srcu){.+.+}-{0:0}: [ 915.946310][T31195] __synchronize_srcu+0xc9/0x2f0 [ 915.951797][T31195] elevator_switch+0x1e8/0x7b0 [ 915.957143][T31195] elevator_change+0x2fa/0x480 [ 915.962432][T31195] elevator_set_default+0x375/0x440 [ 915.968172][T31195] blk_register_queue+0x3f3/0x4e0 [ 915.973813][T31195] __add_disk+0x6b8/0xdb0 [ 915.978700][T31195] add_disk_fwnode+0x100/0x3a0 [ 915.984007][T31195] nbd_dev_add+0x733/0xb60 [ 915.988956][T31195] nbd_init+0x168/0x1f0 [ 915.993708][T31195] do_one_initcall+0x250/0x870 [ 915.999003][T31195] do_initcall_level+0x10a/0x1a0 [ 916.004555][T31195] do_initcalls+0x59/0xa0 [ 916.009411][T31195] kernel_init_freeable+0x29d/0x3e0 [ 916.015133][T31195] kernel_init+0x22/0x1d0 [ 916.019993][T31195] ret_from_fork+0x514/0xb70 [ 916.025109][T31195] ret_from_fork_asm+0x1a/0x30 [ 916.030404][T31195] [ 916.030404][T31195] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 916.038236][T31195] __mutex_lock+0x19d/0x1550 [ 916.043354][T31195] elevator_change+0x1af/0x480 [ 916.048673][T31195] elevator_set_none+0xb5/0x140 [ 916.054045][T31195] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 916.060377][T31195] nbd_start_device+0x189/0xb30 [ 916.065749][T31195] nbd_genl_connect+0x167d/0x1cd0 [ 916.071351][T31195] genl_family_rcv_msg_doit+0x233/0x340 [ 916.077446][T31195] genl_rcv_msg+0x614/0x7a0 [ 916.082477][T31195] netlink_rcv_skb+0x226/0x4a0 [ 916.087771][T31195] genl_rcv+0x28/0x40 [ 916.092274][T31195] netlink_unicast+0x7bd/0x940 [ 916.097569][T31195] netlink_sendmsg+0x813/0xb40 [ 916.102870][T31195] sock_sendmsg_nosec+0x13a/0x180 [ 916.108425][T31195] ____sys_sendmsg+0x54e/0x850 [ 916.113712][T31195] ___sys_sendmsg+0x2a5/0x360 [ 916.118918][T31195] __x64_sys_sendmsg+0x1b1/0x290 [ 916.124385][T31195] do_syscall_64+0x166/0x520 [ 916.129496][T31195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.135912][T31195] [ 916.135912][T31195] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 916.144578][T31195] blk_alloc_queue+0x544/0x690 [ 916.149870][T31195] __blk_mq_alloc_disk+0x194/0x390 [ 916.155517][T31195] nbd_dev_add+0x494/0xb60 [ 916.160457][T31195] nbd_init+0x168/0x1f0 [ 916.165141][T31195] do_one_initcall+0x250/0x870 [ 916.170432][T31195] do_initcall_level+0x10a/0x1a0 [ 916.175891][T31195] do_initcalls+0x59/0xa0 [ 916.180739][T31195] kernel_init_freeable+0x29d/0x3e0 [ 916.186463][T31195] kernel_init+0x22/0x1d0 [ 916.191318][T31195] ret_from_fork+0x514/0xb70 [ 916.196442][T31195] ret_from_fork_asm+0x1a/0x30 [ 916.201762][T31195] [ 916.201762][T31195] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 916.208989][T31195] __lock_acquire+0x164c/0x2de0 [ 916.214382][T31195] lock_acquire+0x115/0x350 [ 916.219416][T31195] fs_reclaim_acquire+0x71/0x100 [ 916.224877][T31195] __kmalloc_noprof+0xbc/0x720 [ 916.230168][T31195] apply_wqattrs_prepare+0xee/0xdc0 [ 916.235892][T31195] __alloc_workqueue+0x11be/0x1fe0 [ 916.241523][T31195] alloc_workqueue_noprof+0xe3/0x210 [ 916.247327][T31195] ib_mad_init_device+0x993/0x2150 [ 916.253055][T31195] add_client_context+0x37c/0x7b0 [ 916.258661][T31195] enable_device_and_get+0x19c/0x3e0 [ 916.264483][T31195] ib_register_device+0xdc8/0x1080 [ 916.270126][T31195] rxe_register_device+0x1e3/0x350 [ 916.275885][T31195] rxe_net_add+0x81/0x110 [ 916.280772][T31195] rxe_newlink+0xf4/0x1c0 [ 916.285629][T31195] nldev_newlink+0x5be/0x650 [ 916.290772][T31195] rdma_nl_rcv+0x6ef/0xa40 [ 916.295749][T31195] netlink_unicast+0x7bd/0x940 [ 916.301039][T31195] netlink_sendmsg+0x813/0xb40 [ 916.306333][T31195] sock_sendmsg_nosec+0x13a/0x180 [ 916.311887][T31195] ____sys_sendmsg+0x54e/0x850 [ 916.317180][T31195] ___sys_sendmsg+0x2a5/0x360 [ 916.322381][T31195] __x64_sys_sendmsg+0x1b1/0x290 [ 916.327855][T31195] do_syscall_64+0x166/0x520 [ 916.332978][T31195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.339672][T31195] [ 916.339672][T31195] other info that might help us debug this: [ 916.339672][T31195] [ 916.349907][T31195] Chain exists of: [ 916.349907][T31195] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 916.349907][T31195] [ 916.362485][T31195] Possible unsafe locking scenario: [ 916.362485][T31195] [ 916.369983][T31195] CPU0 CPU1 [ 916.375349][T31195] ---- ---- [ 916.380718][T31195] lock(wq_pool_mutex); [ 916.384963][T31195] lock(cpu_hotplug_lock); [ 916.391987][T31195] lock(wq_pool_mutex); [ 916.398759][T31195] lock(fs_reclaim); [ 916.402750][T31195] [ 916.402750][T31195] *** DEADLOCK *** [ 916.402750][T31195] [ 916.410891][T31195] locks held by syz.1.11552/31195: 6, last CPU#0: [ 916.417322][T31195] #0: ffffffff9ad87a48 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 916.427359][T31195] #1: ffffffff8ffae5e8 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650 [ 916.436776][T31195] #2: ffffffff8ff9f708 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 916.446753][T31195] #3: ffffffff8ff9fa08 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 916.456827][T31195] #4: ffff888051634658 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0 [ 916.467736][T31195] #5: ffffffff8ebf9080 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 916.477516][T31195] [ 916.477516][T31195] stack backtrace: [ 916.483421][T31195] CPU: 0 UID: 0 PID: 31195 Comm: syz.1.11552 Not tainted syzkaller #0 PREEMPT(full) [ 916.492909][T31195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 916.503078][T31195] Call Trace: [ 916.506385][T31195] [ 916.509324][T31195] dump_stack_lvl+0xe8/0x150 [ 916.513951][T31195] print_circular_bug+0x2e2/0x300 [ 916.519020][T31195] check_noncircular+0x12f/0x150 [ 916.523998][T31195] __lock_acquire+0x164c/0x2de0 [ 916.528864][T31195] ? check_path+0x21/0x40 [ 916.533213][T31195] ? check_noncircular+0xdb/0x150 [ 916.538259][T31195] ? lockdep_unlock+0x5c/0xd0 [ 916.542953][T31195] lock_acquire+0x115/0x350 [ 916.547464][T31195] ? __kmalloc_noprof+0xbc/0x720 [ 916.552428][T31195] ? pcpu_alloc_noprof+0xde2/0x1900 [ 916.557663][T31195] ? apply_wqattrs_prepare+0xee/0xdc0 [ 916.563052][T31195] fs_reclaim_acquire+0x71/0x100 [ 916.568020][T31195] ? __kmalloc_noprof+0xbc/0x720 [ 916.572979][T31195] __kmalloc_noprof+0xbc/0x720 [ 916.577761][T31195] ? apply_wqattrs_prepare+0xee/0xdc0 [ 916.583155][T31195] ? apply_wqattrs_prepare+0xee/0xdc0 [ 916.588545][T31195] apply_wqattrs_prepare+0xee/0xdc0 [ 916.593761][T31195] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 916.599605][T31195] ? pcpu_alloc_noprof+0x100f/0x1900 [ 916.604903][T31195] ? pcpu_alloc_noprof+0x1036/0x1900 [ 916.610208][T31195] __alloc_workqueue+0x11be/0x1fe0 [ 916.615461][T31195] alloc_workqueue_noprof+0xe3/0x210 [ 916.620780][T31195] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 916.626705][T31195] ? __ib_alloc_pd+0x451/0x5c0 [ 916.631505][T31195] ib_mad_init_device+0x993/0x2150 [ 916.636650][T31195] ? __pfx_ib_mad_init_device+0x10/0x10 [ 916.642220][T31195] ? do_raw_spin_unlock+0xf5/0x200 [ 916.647354][T31195] ? _raw_spin_unlock+0x28/0x50 [ 916.652365][T31195] add_client_context+0x37c/0x7b0 [ 916.657405][T31195] ? __pfx_add_client_context+0x10/0x10 [ 916.662960][T31195] ? xa_find+0x25b/0x2b0 [ 916.667252][T31195] enable_device_and_get+0x19c/0x3e0 [ 916.672553][T31195] ? __pfx_enable_device_and_get+0x10/0x10 [ 916.678378][T31195] ? device_add+0x6f6/0xb80 [ 916.682931][T31195] ib_register_device+0xdc8/0x1080 [ 916.688058][T31195] ? __pfx_ib_register_device+0x10/0x10 [ 916.693627][T31195] ? ib_device_set_netdev+0x5c9/0x6d0 [ 916.699023][T31195] rxe_register_device+0x1e3/0x350 [ 916.704150][T31195] rxe_net_add+0x81/0x110 [ 916.708495][T31195] rxe_newlink+0xf4/0x1c0 [ 916.712837][T31195] nldev_newlink+0x5be/0x650 [ 916.717439][T31195] ? __pfx_nldev_newlink+0x10/0x10 [ 916.722597][T31195] ? apparmor_capable+0x126/0x170 [ 916.727741][T31195] ? security_capable+0x7e/0x2c0 [ 916.732717][T31195] ? __pfx_nldev_newlink+0x10/0x10 [ 916.737842][T31195] rdma_nl_rcv+0x6ef/0xa40 [ 916.742276][T31195] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 916.747236][T31195] ? netlink_deliver_tap+0x2e/0x1b0 [ 916.752447][T31195] ? netlink_deliver_tap+0x2e/0x1b0 [ 916.757666][T31195] netlink_unicast+0x7bd/0x940 [ 916.762467][T31195] netlink_sendmsg+0x813/0xb40 [ 916.767254][T31195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.772567][T31195] ? apparmor_socket_sendmsg+0x98/0x360 [ 916.778130][T31195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.783431][T31195] sock_sendmsg_nosec+0x13a/0x180 [ 916.788487][T31195] ____sys_sendmsg+0x54e/0x850 [ 916.793261][T31195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 916.798562][T31195] ? import_iovec+0x73/0xa0 [ 916.803090][T31195] ___sys_sendmsg+0x2a5/0x360 [ 916.807775][T31195] ? __lock_acquire+0x747/0x2de0 [ 916.812720][T31195] ? __pfx____sys_sendmsg+0x10/0x10 [ 916.817927][T31195] ? futex_wait+0x2a2/0x390 [ 916.822479][T31195] ? __fget_files+0x2a/0x420 [ 916.827080][T31195] ? __fget_files+0x3a2/0x420 [ 916.831769][T31195] __x64_sys_sendmsg+0x1b1/0x290 [ 916.836729][T31195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 916.842214][T31195] do_syscall_64+0x166/0x520 [ 916.846810][T31195] ? trace_irq_disable+0x3b/0x140 [ 916.851869][T31195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.857954][T31195] ? clear_bhb_loop+0x70/0xc0 [ 916.862638][T31195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.868536][T31195] RIP: 0033:0x7f8e2259e159 [ 916.872962][T31195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.892581][T31195] RSP: 002b:00007f8e207f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.901005][T31195] RAX: ffffffffffffffda RBX: 00007f8e22825fa0 RCX: 00007f8e2259e159 [ 916.909005][T31195] RDX: 0000000000004010 RSI: 0000200000000240 RDI: 0000000000000005 [ 916.916981][T31195] RBP: 00007f8e2263503b R08: 0000000000000000 R09: 0000000000000000 [ 916.924955][T31195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.932931][T31195] R13: 00007f8e22826038 R14: 00007f8e22825fa0 R15: 00007ffdb5c1ae78 [ 916.940916][T31195] [ 916.946883][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 916.975638][T31195] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 916.977300][T31195] infiniband syz1: Couldn't open port 1 [ 916.977537][T31195] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 916.977569][T31195] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 916.977606][T31195] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 917.095525][T31224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11562'. [ 917.202423][T31195] RDS/IB: syz1: added [ 917.202465][T31195] smc: adding ib device syz1 with port count 1 [ 917.202482][T31195] smc: ib device syz1 port 1 has no pnetid